CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the uaa /oauth/token endpoint in pivotal cloud foundry (pcf) before 243; uaa 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; uaa bosh before 11.7 and 12.x before 12.6; elastic runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and ops manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-09-30
Last Modified Date: 2016-11-28