CVE-2021-22098
N/A
N/A
Summary
UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | UAA server | Cloud Foundry UAA server prior to version 75.4.0 | affected |
Weaknesses
- CWE-601: CWE-601: URL Redirection to Untrusted Site
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.