Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
Cloud Foundry UAA 输入验证错误漏洞
Vulnerability Description
Cloud Foundry UAA是美国Cloud Foundry基金会的一款应用于CloudFoundry云平台的身份验证和管理服务终端。 UAA 存在输入验证错误漏洞，该漏洞源于75.4.0 版本及之前版本的UAA容易受到一个开放重定向漏洞的攻击。恶意用户可以通过社会工程利用开放重定向漏洞，在某些情况下接管受害者账户，并将UAA用户重定向到恶意网站。
CVSS Information
N/A
Vulnerability Type
N/A