Search Results | AttackerKB

Show filters

Clear All

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

1 Total Results

Displaying 1-1 of 1

Attacker Value

Unknown

UAA is vulnerable to a Blind SCIM injection leading to information disclosure

Disclosure Date: October 23, 2019 (last updated November 27, 2024)

Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak information about users of the UAA.

1 Total Results

Displaying 1-1 of 1

Unknown

UAA is vulnerable to a Blind SCIM injection leading to information disclosure

Quick Cookie Notification