CVE-2024-38806CWE-440

UAA Failure to Remove Shadow User’s Access

Low · published July 18, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40.17.0 ,

potentially resulting in users retaining access rights they should not

have. This can allow them to perform operations beyond their intended

permissions.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Weakness
CWE-440 · Expected Behavior Violation
Published
2024-07-18T18:41Z
EPSS history
Timeline
  • 18 JUL 18:41Z
    UAA Failure to Remove Shadow User’s Access
    cvelistv5