PT-2018-10267 · Cloud Foundry · Cloud Foundry Uaa

Dr. Nic Williams · Published 2018-07-24 · Updated 2022-05-13 · CVE-2018-11047

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA versions 4.19 prior to 4.19.2 Cloud Foundry UAA versions 4.12 prior to 4.12.4 Cloud Foundry UAA versions 4.10 prior to 4.10.2 Cloud Foundry UAA versions 4.7 prior to 4.7.6 Cloud Foundry UAA versions 4.5 prior to 4.5.7

Description The issue incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. This affects the administrative endpoints of the UAA, such as /Users and /Groups. Refresh tokens have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.

Recommendations For Cloud Foundry UAA version 4.19 prior to 4.19.2, update to version 4.19.2 or later. For Cloud Foundry UAA version 4.12 prior to 4.12.4, update to version 4.12.4 or later. For Cloud Foundry UAA version 4.10 prior to 4.10.2, update to version 4.10.2 or later. For Cloud Foundry UAA version 4.7 prior to 4.7.6, update to version 4.7.6 or later. For Cloud Foundry UAA version 4.5 prior to 4.5.7, update to version 4.5.7 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2018-11047

GHSA-R4V8-9HGX-VM6M

Affected Products

Cloud Foundry Uaa

References · 15

• https://cloudfoundry.org/blog/cve-2018-11047 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-11047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11047 · Security Note
• https://osv.dev/vulnerability/GHSA-r4v8-9hgx-vm6m · Vendor Advisory
• https://github.com/cloudfoundry/uaa · Note
• https://github.com/cloudfoundry/uaa/commit/aba1fb5f18e0d628628b2d960fc6d0cc62d86f5 · Note
• https://github.com/cloudfoundry/uaa/commit/81aeb7a3aa048ea086c494f725d643e48dd9266 · Note
• https://github.com/cloudfoundry/uaa/commit/a1d523c7f150e56bf06df8b83ed1d416d6c1d3b · Note
• https://github.com/cloudfoundry/uaa/commit/4fa3e351ec0bface3b693810605905e29a9a8569 · Note
• https://github.com/cloudfoundry/uaa/commit/bbbba5aec514ad88e7d1e168a2519c80229f02f · Note
• https://github.com/cloudfoundry/uaa/commit/2906057dae995024576ce6afdc20abd85569514 · Note
• https://github.com/cloudfoundry/uaa/commit/b37552d2bf084de059bc965b5ef5a45e64883904 · Note
• https://github.com/cloudfoundry/uaa/commit/0cd3c6fdd96206a1d6a376ac62e21e59e16cdcb1 · Note
• https://github.com/cloudfoundry/uaa/commit/4cb1be404cf4a82e39cf2a6357aa17af8b33f2a1 · Note
• https://github.com/cloudfoundry/uaa/commit/5d021e83ef143c64179d0da015aa76321ee40988 · Note