CVE-2018-11047

Description

Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. Refresh tokens by design have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. This affects the administrative endpoints of the UAA. i.e. /Users, /Groups, etc. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.278

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server 4.5.7Windows
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server 4.7.6Windows
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server 4.10.2Windows
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server 4.12.4Windows
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server 4.19.2Windows
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server for Linux 4.5.7Linux
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server for Linux 4.7.6Linux
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server for Linux 4.10.2Linux
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server for Linux 4.12.4Linux
Vulnerabilities CVE-2018-11047 are fixed in Cloudfoundry-identity-server for Linux 4.19.2Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234