Description (CNA)
Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cloud Foundry / UAA Release (OSS) | affected All before v70.0 |
CWE
CWE-290
References
ADP enrichment
No English description supplied.