PT-2018-10267 · Cloud Foundry · Cloud Foundry Uaa

Dr. Nic Williams · Publicado 2018-07-24 · Atualizado 2022-05-13 · CVE-2018-11047

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA versions 4.19 prior to 4.19.2 Cloud Foundry UAA versions 4.12 prior to 4.12.4 Cloud Foundry UAA versions 4.10 prior to 4.10.2 Cloud Foundry UAA versions 4.7 prior to 4.7.6 Cloud Foundry UAA versions 4.5 prior to 4.5.7

Description The issue incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. This affects the administrative endpoints of the UAA, such as /Users and /Groups. Refresh tokens have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.

Recommendations For Cloud Foundry UAA version 4.19 prior to 4.19.2, update to version 4.19.2 or later. For Cloud Foundry UAA version 4.12 prior to 4.12.4, update to version 4.12.4 or later. For Cloud Foundry UAA version 4.10 prior to 4.10.2, update to version 4.10.2 or later. For Cloud Foundry UAA version 4.7 prior to 4.7.6, update to version 4.7.6 or later. For Cloud Foundry UAA version 4.5 prior to 4.5.7, update to version 4.5.7 or later.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2018-11047

GHSA-R4V8-9HGX-VM6M

Produtos afetados

Cloud Foundry Uaa

Referências · 15

• https://github.com/cloudfoundry/uaa · Nota
• https://github.com/cloudfoundry/uaa/commit/aba1fb5f18e0d628628b2d960fc6d0cc62d86f5 · Nota
• https://github.com/cloudfoundry/uaa/commit/81aeb7a3aa048ea086c494f725d643e48dd9266 · Nota
• https://github.com/cloudfoundry/uaa/commit/a1d523c7f150e56bf06df8b83ed1d416d6c1d3b · Nota
• https://github.com/cloudfoundry/uaa/commit/4fa3e351ec0bface3b693810605905e29a9a8569 · Nota
• https://github.com/cloudfoundry/uaa/commit/bbbba5aec514ad88e7d1e168a2519c80229f02f · Nota
• https://github.com/cloudfoundry/uaa/commit/2906057dae995024576ce6afdc20abd85569514 · Nota
• https://github.com/cloudfoundry/uaa/commit/b37552d2bf084de059bc965b5ef5a45e64883904 · Nota
• https://github.com/cloudfoundry/uaa/commit/0cd3c6fdd96206a1d6a376ac62e21e59e16cdcb1 · Nota
• https://github.com/cloudfoundry/uaa/commit/4cb1be404cf4a82e39cf2a6357aa17af8b33f2a1 · Nota
• https://github.com/cloudfoundry/uaa/commit/5d021e83ef143c64179d0da015aa76321ee40988 · Nota
• https://cloudfoundry.org/blog/cve-2018-11047 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-11047 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11047 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-r4v8-9hgx-vm6m · Aviso do Fabricante