Produkt Single sign-on for pivotal cloud foundry (...) - CVEMAP.ORG

Podatności dla
'Single sign-on for pivotal cloud foundry'

2017-11-27

CVE-2017-8044

CWE-79

In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.

2017-09-08

CVE-2017-8041

In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name.

CVE-2017-8040

In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the Single Sign-On service broker file system.

>>> Vendor: Pivotal software 54 Produkty

Rabbitmq management

Spring framework

Cloud foundry elastic runtime

Cloud foundry ops manager

Cloud foundry uaa

Cloud foundry uaa bosh

Operations manager

Spring data jpa

Cloud foundry cf mysql

Gemfire for pivotal cloud foundry

Spring security

Cloud foundry elastic runtime cf release

Cloud foundry uaa release

Cloud foundry cf release

Cloud foundry garden linux

Cloud foundry cf

Single sign-on for pivotal cloud foundry

Spring advanced message queuing protocol

Credhub-release

Spring data rest

Cloud foundry uaa-release

Spring batch admin

Spring data commons

Spring cloud sso connector

Spring security oauth

Windows stemcells

Spring integration zip

Pivotal application service

Cloud foundry cf-deployment

Cloudfoundry uaa release

Cloudfoundry uaa

Spring integration

Spring web services

Cloud foundry cf-release

Application service

Pivotal container service

Credhub service broker

Spring data java persistance api

Copyright 2024, cxsecurity.com