CVE-2019-11270 : Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a mali

Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess.

Published 2019-08-05 17:15:11

Updated 2020-10-02 14:01:25

Source Pivotal Software, Inc.

View at NVD, CVE.org

Products affected by CVE-2019-11270

Pivotal Software » Cloud Foundry Uaa
Versions before (<) 73.4.0
cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Operations Manager
Versions from including (>=) 2.5.0 and before (<) 2.5.10
cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Operations Manager
Versions from including (>=) 2.3.0 and before (<) 2.3.22
cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Operations Manager
Versions from including (>=) 2.4.0 and before (<) 2.4.16
cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Operations Manager
Versions from including (>=) 2.6.0 and before (<) 2.6.4
cpe:2.3:a:pivotal_software:operations_manager:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Application Service
Versions from including (>=) 2.4.0 and before (<) 2.4.11
cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Application Service
Versions from including (>=) 2.6.0 and before (<) 2.6.2
cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Application Service
Versions from including (>=) 2.3.0 and before (<) 2.3.15
cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*
Matching versions
Pivotal Software » Application Service
Versions from including (>=) 2.5.0 and before (<) 2.5.7
cpe:2.3:a:pivotal_software:application_service:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2019-11270

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-11270

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
7.3	HIGH	CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N	1.0	5.8	Pivotal Software, Inc.
Attack Vector: Network Attack Complexity: High Privileges Required: High User Interaction: Required Scope: Changed Confidentiality: High Integrity: High Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

CWE ids for CVE-2019-11270

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Assigned by: security@pivotal.io (Secondary)
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-11270

https://www.cloudfoundry.org/blog/cve-2019-11270

CVE-2019-11270: UAA clients.write vulnerability | Cloud Foundry
Vendor Advisory
https://pivotal.io/security/cve-2019-11270

CVE-2019-11270: UAA clients.write vulnerability | Security | Pivotal
Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-11270

Products affected by CVE-2019-11270

Exploit prediction scoring system (EPSS) score for CVE-2019-11270

CVSS scores for CVE-2019-11270

CWE ids for CVE-2019-11270

References for CVE-2019-11270