← CVE Intelligence

CVE-2015-3190

Pivotal / Cloud Foundry PUBLISHED

Description (CNA)

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

Affected (CNA)

Vendor / productVersions
Pivotal / Cloud Foundryaffected Runtime cf-release versions v209 or earlier; affected UAA Standalone versions 2.2.6 or earlier; affected Runtime 1.4.5 or earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.