← CVE Intelligence

CVE-2017-8044

n/a / Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3 PUBLISHED

Description (CNA)

In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.

Affected (CNA)

Vendor / productVersions
n/a / Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3affected Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.