CVE-2018-15761 UAA Privilege Escalation

What is CVE-2018-15761?

CVE-2018-15761 is a critical vulnerability in Cloud Foundry UAA, published on 19 Nov 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.

Which versions are affected by CVE-2018-15761?

2 open source packages ship an affected version, including org.cloudfoundry.identity:cloudfoundry-identity-server. It affects 2 products.

Products include Pivotal Software Cloud Foundry Uaa, Pivotal Software Cloudfoundry Uaa Release.

How do I fix CVE-2018-15761?

Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 4.23.0 or later.

Is CVE-2018-15761 being exploited?

There is no known exploitation of CVE-2018-15761 in the wild and no public exploit code.

Other vulnerabilities in Cloud Foundry UAA

• CVE-2018-11047 Cloud Foundry UAA accepts refresh token as access token on admin endpoints High 7.5
• CVE-2019-3794 UAA - Login app subject to clickjacking attack Medium 6.5
• CVE-2018-11041 Cloud Foundry UAA open redirect Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-292x-hjr8-226f.