CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Information Exposure
Summary: cloud foundry uaa version prior to 73.3.0, contain endpoints that contains improper escaping. an authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private information on users, clients, and groups in all other identity zones.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-07-11
Last Modified Date: 2019-10-09