CVE-2018-11041 Cloud Foundry UAA open redirect

What is CVE-2018-11041?

CVE-2018-11041 is a medium-severity vulnerability in Cloud Foundry UAA, published on 25 Jun 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects on the login page, allowing open redirects. A remote attacker can craft a malicious link that, when clicked, will redirect users to arbitrary websites after a successful login attempt.

Weakness: CWE-601

Which versions are affected by CVE-2018-11041?

8 open source packages ship an affected version, including org.cloudfoundry.identity:cloudfoundry-identity-server. It affects 2 products.

Products include Pivotal Software Cloud Foundry Uaa, Pivotal Software Cloud Foundry Uaa-Release.

How do I fix CVE-2018-11041?

Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to a fixed version for your release line: 4.7.5, 4.12.3, 4.19.0 or 4.10.1.

Is CVE-2018-11041 being exploited?

There is no known exploitation of CVE-2018-11041 in the wild and no public exploit code.

Other vulnerabilities in Cloud Foundry UAA

• CVE-2018-15761 UAA Privilege Escalation Critical 9.9
• CVE-2018-11047 Cloud Foundry UAA accepts refresh token as access token on admin endpoints High 7.5
• CVE-2019-3794 UAA - Login app subject to clickjacking attack Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xh4m-99qp-w483.