← CVE Intelligence

CVE-2020-5402

UAA fails to check the state parameter when authenticating with external IDPs PUBLISHED

Description (CNA)

In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity providers.

Affected (CNA)

Vendor / productVersions
Cloud Foundry / UAAaffected unspecified before v74.14.0

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.