CVE-2019-3787

Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending ?unknown.org? to a user's email address when one is not provided and the user name does not contain an @ character. This domain is held by a private company, which leads to attack vectors including password recovery emails sent to a potentially fraudulent address. This would allow the attacker to gain complete control of the user's account.

Published : 2019-06-19 23:15 Updated : 2019-10-10 12:11

4.3
CVSS Score More info
Score 4.3 / 10
4.3
Vendor Product Version URI
Pivotal Software Cloud Foundry Uaa-release 45.9 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.9
Pivotal Software Cloud Foundry Uaa-release 45.10 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.10
Pivotal Software Cloud Foundry Uaa-release 45.11 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.11
Pivotal Software Cloud Foundry Uaa-release 52.10 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.10
Pivotal Software Cloud Foundry Uaa-release 55.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:55.2
Pivotal Software Cloud Foundry Uaa-release 57.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:57.3
Pivotal Software Cloud Foundry Uaa-release 57.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:57.4
Pivotal Software Cloud Foundry Uaa-release 60.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:60.2
Pivotal Software Cloud Foundry Uaa-release 61.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:61.0
Pivotal Software Cloud Foundry Uaa-release 62.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:62.0
Pivotal Software Cloud Foundry Uaa-release 63.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:63.0
Pivotal Software Cloud Foundry Uaa-release 64.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:64.0
Pivotal Software Cloud Foundry Uaa-release 66.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:66.0
Pivotal Software Cloud Foundry Uaa-release 67.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:67.0
Pivotal Software Cloud Foundry Uaa-release 68.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:68.0
Pivotal Software Cloud Foundry Uaa-release 69.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:69.0
Pivotal Software Cloud Foundry Uaa-release 70.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:70.0
Pivotal Software Cloud Foundry Uaa-release 71.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:71.0
Pivotal Software Cloud Foundry Uaa-release 72.0 cpe:/a:pivotal_software:cloud_foundry_uaa-release:72.0
Pivotal Software Cloud Foundry Uaa-release 2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:2
Pivotal Software Cloud Foundry Uaa-release 3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:3
Pivotal Software Cloud Foundry Uaa-release 4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:4
Pivotal Software Cloud Foundry Uaa-release 5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:5
Pivotal Software Cloud Foundry Uaa-release 6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:6
Pivotal Software Cloud Foundry Uaa-release 7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:7
Pivotal Software Cloud Foundry Uaa-release 8 cpe:/a:pivotal_software:cloud_foundry_uaa-release:8
Pivotal Software Cloud Foundry Uaa-release 9 cpe:/a:pivotal_software:cloud_foundry_uaa-release:9
Pivotal Software Cloud Foundry Uaa-release 10 cpe:/a:pivotal_software:cloud_foundry_uaa-release:10
Pivotal Software Cloud Foundry Uaa-release 11 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11
Pivotal Software Cloud Foundry Uaa-release 11.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11.1
Pivotal Software Cloud Foundry Uaa-release 11.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11.2
Pivotal Software Cloud Foundry Uaa-release 11.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11.3
Pivotal Software Cloud Foundry Uaa-release 11.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11.4
Pivotal Software Cloud Foundry Uaa-release 11.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11.5
Pivotal Software Cloud Foundry Uaa-release 11.7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:11.7
Pivotal Software Cloud Foundry Uaa-release 12 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12
Pivotal Software Cloud Foundry Uaa-release 12.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12.1
Pivotal Software Cloud Foundry Uaa-release 12.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12.2
Pivotal Software Cloud Foundry Uaa-release 12.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12.3
Pivotal Software Cloud Foundry Uaa-release 12.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12.4
Pivotal Software Cloud Foundry Uaa-release 12.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12.5
Pivotal Software Cloud Foundry Uaa-release 12.6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:12.6
Pivotal Software Cloud Foundry Uaa-release 13 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13
Pivotal Software Cloud Foundry Uaa-release 13.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.1
Pivotal Software Cloud Foundry Uaa-release 13.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.2
Pivotal Software Cloud Foundry Uaa-release 13.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.3
Pivotal Software Cloud Foundry Uaa-release 13.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.4
Pivotal Software Cloud Foundry Uaa-release 13.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.5
Pivotal Software Cloud Foundry Uaa-release 13.6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.6
Pivotal Software Cloud Foundry Uaa-release 13.7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.7
Pivotal Software Cloud Foundry Uaa-release 13.8 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.8
Pivotal Software Cloud Foundry Uaa-release 13.9 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.9
Pivotal Software Cloud Foundry Uaa-release 13.10 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.10
Pivotal Software Cloud Foundry Uaa-release 13.11 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.11
Pivotal Software Cloud Foundry Uaa-release 13.12 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.12
Pivotal Software Cloud Foundry Uaa-release 13.13 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.13
Pivotal Software Cloud Foundry Uaa-release 13.14 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.14
Pivotal Software Cloud Foundry Uaa-release 13.15 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.15
Pivotal Software Cloud Foundry Uaa-release 13.16 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.16
Pivotal Software Cloud Foundry Uaa-release 13.17 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.17
Pivotal Software Cloud Foundry Uaa-release 13.18 cpe:/a:pivotal_software:cloud_foundry_uaa-release:13.18
Pivotal Software Cloud Foundry Uaa-release 14 cpe:/a:pivotal_software:cloud_foundry_uaa-release:14
Pivotal Software Cloud Foundry Uaa-release 15 cpe:/a:pivotal_software:cloud_foundry_uaa-release:15
Pivotal Software Cloud Foundry Uaa-release 16 cpe:/a:pivotal_software:cloud_foundry_uaa-release:16
Pivotal Software Cloud Foundry Uaa-release 17 cpe:/a:pivotal_software:cloud_foundry_uaa-release:17
Pivotal Software Cloud Foundry Uaa-release 18 cpe:/a:pivotal_software:cloud_foundry_uaa-release:18
Pivotal Software Cloud Foundry Uaa-release 19 cpe:/a:pivotal_software:cloud_foundry_uaa-release:19
Pivotal Software Cloud Foundry Uaa-release 20 cpe:/a:pivotal_software:cloud_foundry_uaa-release:20
Pivotal Software Cloud Foundry Uaa-release 21 cpe:/a:pivotal_software:cloud_foundry_uaa-release:21
Pivotal Software Cloud Foundry Uaa-release 22 cpe:/a:pivotal_software:cloud_foundry_uaa-release:22
Pivotal Software Cloud Foundry Uaa-release 23 cpe:/a:pivotal_software:cloud_foundry_uaa-release:23
Pivotal Software Cloud Foundry Uaa-release 24 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24
Pivotal Software Cloud Foundry Uaa-release 24.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.1
Pivotal Software Cloud Foundry Uaa-release 24.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.2
Pivotal Software Cloud Foundry Uaa-release 24.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.3
Pivotal Software Cloud Foundry Uaa-release 24.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.4
Pivotal Software Cloud Foundry Uaa-release 24.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.5
Pivotal Software Cloud Foundry Uaa-release 24.6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.6
Pivotal Software Cloud Foundry Uaa-release 24.7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.7
Pivotal Software Cloud Foundry Uaa-release 24.8 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.8
Pivotal Software Cloud Foundry Uaa-release 24.9 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.9
Pivotal Software Cloud Foundry Uaa-release 24.10 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.10
Pivotal Software Cloud Foundry Uaa-release 24.11 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.11
Pivotal Software Cloud Foundry Uaa-release 24.12 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.12
Pivotal Software Cloud Foundry Uaa-release 24.13 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.13
Pivotal Software Cloud Foundry Uaa-release 24.14 cpe:/a:pivotal_software:cloud_foundry_uaa-release:24.14
Pivotal Software Cloud Foundry Uaa-release 25 cpe:/a:pivotal_software:cloud_foundry_uaa-release:25
Pivotal Software Cloud Foundry Uaa-release 26 cpe:/a:pivotal_software:cloud_foundry_uaa-release:26
Pivotal Software Cloud Foundry Uaa-release 27 cpe:/a:pivotal_software:cloud_foundry_uaa-release:27
Pivotal Software Cloud Foundry Uaa-release 28 cpe:/a:pivotal_software:cloud_foundry_uaa-release:28
Pivotal Software Cloud Foundry Uaa-release 29 cpe:/a:pivotal_software:cloud_foundry_uaa-release:29
Pivotal Software Cloud Foundry Uaa-release 30 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30
Pivotal Software Cloud Foundry Uaa-release 30.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.1
Pivotal Software Cloud Foundry Uaa-release 30.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.2
Pivotal Software Cloud Foundry Uaa-release 30.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.3
Pivotal Software Cloud Foundry Uaa-release 30.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.4
Pivotal Software Cloud Foundry Uaa-release 30.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.5
Pivotal Software Cloud Foundry Uaa-release 30.6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.6
Pivotal Software Cloud Foundry Uaa-release 30.7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.7
Pivotal Software Cloud Foundry Uaa-release 30.8 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.8
Pivotal Software Cloud Foundry Uaa-release 30.9 cpe:/a:pivotal_software:cloud_foundry_uaa-release:30.9
Pivotal Software Cloud Foundry Uaa-release 31 cpe:/a:pivotal_software:cloud_foundry_uaa-release:31
Pivotal Software Cloud Foundry Uaa-release 32 cpe:/a:pivotal_software:cloud_foundry_uaa-release:32
Pivotal Software Cloud Foundry Uaa-release 33 cpe:/a:pivotal_software:cloud_foundry_uaa-release:33
Pivotal Software Cloud Foundry Uaa-release 34 cpe:/a:pivotal_software:cloud_foundry_uaa-release:34
Pivotal Software Cloud Foundry Uaa-release 34.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:34.1
Pivotal Software Cloud Foundry Uaa-release 34.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:34.2
Pivotal Software Cloud Foundry Uaa-release 34.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:34.3
Pivotal Software Cloud Foundry Uaa-release 35 cpe:/a:pivotal_software:cloud_foundry_uaa-release:35
Pivotal Software Cloud Foundry Uaa-release 36 cpe:/a:pivotal_software:cloud_foundry_uaa-release:36
Pivotal Software Cloud Foundry Uaa-release 37 cpe:/a:pivotal_software:cloud_foundry_uaa-release:37
Pivotal Software Cloud Foundry Uaa-release 38 cpe:/a:pivotal_software:cloud_foundry_uaa-release:38
Pivotal Software Cloud Foundry Uaa-release 39 cpe:/a:pivotal_software:cloud_foundry_uaa-release:39
Pivotal Software Cloud Foundry Uaa-release 40 cpe:/a:pivotal_software:cloud_foundry_uaa-release:40
Pivotal Software Cloud Foundry Uaa-release 41 cpe:/a:pivotal_software:cloud_foundry_uaa-release:41
Pivotal Software Cloud Foundry Uaa-release 41.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:41.1
Pivotal Software Cloud Foundry Uaa-release 43 cpe:/a:pivotal_software:cloud_foundry_uaa-release:43
Pivotal Software Cloud Foundry Uaa-release 44 cpe:/a:pivotal_software:cloud_foundry_uaa-release:44
Pivotal Software Cloud Foundry Uaa-release 45 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45
Pivotal Software Cloud Foundry Uaa-release 45.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.1
Pivotal Software Cloud Foundry Uaa-release 45.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.2
Pivotal Software Cloud Foundry Uaa-release 45.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.3
Pivotal Software Cloud Foundry Uaa-release 45.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.4
Pivotal Software Cloud Foundry Uaa-release 45.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.5
Pivotal Software Cloud Foundry Uaa-release 45.6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.6
Pivotal Software Cloud Foundry Uaa-release 45.7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.7
Pivotal Software Cloud Foundry Uaa-release 45.8 cpe:/a:pivotal_software:cloud_foundry_uaa-release:45.8
Pivotal Software Cloud Foundry Uaa-release 48 cpe:/a:pivotal_software:cloud_foundry_uaa-release:48
Pivotal Software Cloud Foundry Uaa-release 50 cpe:/a:pivotal_software:cloud_foundry_uaa-release:50
Pivotal Software Cloud Foundry Uaa-release 51 cpe:/a:pivotal_software:cloud_foundry_uaa-release:51
Pivotal Software Cloud Foundry Uaa-release 52 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52
Pivotal Software Cloud Foundry Uaa-release 52.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.1
Pivotal Software Cloud Foundry Uaa-release 52.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.2
Pivotal Software Cloud Foundry Uaa-release 52.4 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.4
Pivotal Software Cloud Foundry Uaa-release 52.5 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.5
Pivotal Software Cloud Foundry Uaa-release 52.6 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.6
Pivotal Software Cloud Foundry Uaa-release 52.7 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.7
Pivotal Software Cloud Foundry Uaa-release 52.8 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.8
Pivotal Software Cloud Foundry Uaa-release 52.9 cpe:/a:pivotal_software:cloud_foundry_uaa-release:52.9
Pivotal Software Cloud Foundry Uaa-release 53 cpe:/a:pivotal_software:cloud_foundry_uaa-release:53
Pivotal Software Cloud Foundry Uaa-release 53.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:53.1
Pivotal Software Cloud Foundry Uaa-release 53.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:53.2
Pivotal Software Cloud Foundry Uaa-release 53.3 cpe:/a:pivotal_software:cloud_foundry_uaa-release:53.3
Pivotal Software Cloud Foundry Uaa-release 54 cpe:/a:pivotal_software:cloud_foundry_uaa-release:54
Pivotal Software Cloud Foundry Uaa-release 55 cpe:/a:pivotal_software:cloud_foundry_uaa-release:55
Pivotal Software Cloud Foundry Uaa-release 55.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:55.1
Pivotal Software Cloud Foundry Uaa-release 56 cpe:/a:pivotal_software:cloud_foundry_uaa-release:56
Pivotal Software Cloud Foundry Uaa-release 57 cpe:/a:pivotal_software:cloud_foundry_uaa-release:57
Pivotal Software Cloud Foundry Uaa-release 57.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:57.1
Pivotal Software Cloud Foundry Uaa-release 57.2 cpe:/a:pivotal_software:cloud_foundry_uaa-release:57.2
Pivotal Software Cloud Foundry Uaa-release 58 cpe:/a:pivotal_software:cloud_foundry_uaa-release:58
Pivotal Software Cloud Foundry Uaa-release 58.1 cpe:/a:pivotal_software:cloud_foundry_uaa-release:58.1
Pivotal Software Cloud Foundry Uaa-release 59 cpe:/a:pivotal_software:cloud_foundry_uaa-release:59
Pivotal Software Cloud Foundry Uaa-release 60 cpe:/a:pivotal_software:cloud_foundry_uaa-release:60
  1. Pivotal Software (1) Search CVE
    1. Cloud Foundry Uaa-release (154) Search CVE
      1. 45.9
      2. 45.10
      3. 45.11
      4. 52.10
      5. 55.2
      6. 57.3
      7. 57.4
      8. 60.2
      9. 61.0
      10. 62.0
      11. 63.0
      12. 64.0
      13. 66.0
      14. 67.0
      15. 68.0
      16. 69.0
      17. 70.0
      18. 71.0
      19. 72.0
      20. 2
      21. 3
      22. 4
      23. 5
      24. 6
      25. 7
      26. 8
      27. 9
      28. 10
      29. 11
      30. 11.1
      31. 11.2
      32. 11.3
      33. 11.4
      34. 11.5
      35. 11.7
      36. 12
      37. 12.1
      38. 12.2
      39. 12.3
      40. 12.4
      41. 12.5
      42. 12.6
      43. 13
      44. 13.1
      45. 13.2
      46. 13.3
      47. 13.4
      48. 13.5
      49. 13.6
      50. 13.7
      51. 13.8
      52. 13.9
      53. 13.10
      54. 13.11
      55. 13.12
      56. 13.13
      57. 13.14
      58. 13.15
      59. 13.16
      60. 13.17
      61. 13.18
      62. 14
      63. 15
      64. 16
      65. 17
      66. 18
      67. 19
      68. 20
      69. 21
      70. 22
      71. 23
      72. 24
      73. 24.1
      74. 24.2
      75. 24.3
      76. 24.4
      77. 24.5
      78. 24.6
      79. 24.7
      80. 24.8
      81. 24.9
      82. 24.10
      83. 24.11
      84. 24.12
      85. 24.13
      86. 24.14
      87. 25
      88. 26
      89. 27
      90. 28
      91. 29
      92. 30
      93. 30.1
      94. 30.2
      95. 30.3
      96. 30.4
      97. 30.5
      98. 30.6
      99. 30.7
      100. 30.8
      101. 30.9
      102. 31
      103. 32
      104. 33
      105. 34
      106. 34.1
      107. 34.2
      108. 34.3
      109. 35
      110. 36
      111. 37
      112. 38
      113. 39
      114. 40
      115. 41
      116. 41.1
      117. 43
      118. 44
      119. 45
      120. 45.1
      121. 45.2
      122. 45.3
      123. 45.4
      124. 45.5
      125. 45.6
      126. 45.7
      127. 45.8
      128. 48
      129. 50
      130. 51
      131. 52
      132. 52.1
      133. 52.2
      134. 52.4
      135. 52.5
      136. 52.6
      137. 52.7
      138. 52.8
      139. 52.9
      140. 53
      141. 53.1
      142. 53.2
      143. 53.3
      144. 54
      145. 55
      146. 55.1
      147. 56
      148. 57
      149. 57.1
      150. 57.2
      151. 58
      152. 58.1
      153. 59
      154. 60

CWE

ID Name Description Links
CWE-640 Weak Password Recovery Mechanism for Forgotten Password The software contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak. CVE

Reference

History of changes

Date Event
2019-10-09 23:49
2019-06-24 13:37
2019-06-19 23:15

New CVE