The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token.
{
"unresolved_ranges": [
{
"vendor_product": "cloudfoundry:cloud_foundry_uaa_bosh",
"source": "CPE_RANGE",
"extracted_events": [
{
"last_affected": "16.0"
}
],
"cpes": [
"cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:*:*:*:*:*:*:*:*"
]
},
{
"vendor_product": "pivotal_software:cloud_foundry",
"source": "CPE_RANGE",
"extracted_events": [
{
"last_affected": "242.0"
}
],
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry:*:*:*:*:*:*:*:*"
]
},
{
"vendor_product": "pivotal_software:cloud_foundry_elastic_runtime",
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "1.6.0"
},
{
"last_affected": "1.6.0"
},
{
"introduced": "1.6.6"
},
{
"last_affected": "1.6.6"
},
{
"introduced": "1.6.6"
},
{
"last_affected": "1.6.6"
},
{
"introduced": "1.6.7"
},
{
"last_affected": "1.6.7"
},
{
"introduced": "1.6.7"
},
{
"last_affected": "1.6.7"
},
{
"introduced": "1.6.8"
},
{
"last_affected": "1.6.8"
},
{
"introduced": "1.6.8"
},
{
"last_affected": "1.6.8"
},
{
"introduced": "1.6.9"
},
{
"last_affected": "1.6.9"
},
{
"introduced": "1.6.9"
},
{
"last_affected": "1.6.9"
},
{
"introduced": "1.6.10"
},
{
"last_affected": "1.6.10"
},
{
"introduced": "1.6.10"
},
{
"last_affected": "1.6.10"
},
{
"introduced": "1.6.11"
},
{
"last_affected": "1.6.11"
},
{
"introduced": "1.6.11"
},
{
"last_affected": "1.6.11"
},
{
"introduced": "1.6.12"
},
{
"last_affected": "1.6.12"
},
{
"introduced": "1.6.12"
},
{
"last_affected": "1.6.12"
},
{
"introduced": "1.6.13"
},
{
"last_affected": "1.6.13"
},
{
"introduced": "1.6.13"
},
{
"last_affected": "1.6.13"
},
{
"introduced": "1.6.14"
},
{
"last_affected": "1.6.14"
},
{
"introduced": "1.6.14"
},
{
"last_affected": "1.6.14"
},
{
"introduced": "1.6.15"
},
{
"last_affected": "1.6.15"
},
{
"introduced": "1.6.15"
},
{
"last_affected": "1.6.15"
},
{
"introduced": "1.6.17"
},
{
"last_affected": "1.6.17"
},
{
"introduced": "1.6.17"
},
{
"last_affected": "1.6.17"
},
{
"introduced": "1.6.18"
},
{
"last_affected": "1.6.18"
},
{
"introduced": "1.6.18"
},
{
"last_affected": "1.6.18"
},
{
"introduced": "1.6.19"
},
{
"last_affected": "1.6.19"
},
{
"introduced": "1.6.19"
},
{
"last_affected": "1.6.19"
},
{
"introduced": "1.6.20"
},
{
"last_affected": "1.6.20"
},
{
"introduced": "1.6.20"
},
{
"last_affected": "1.6.20"
},
{
"introduced": "1.6.21"
},
{
"last_affected": "1.6.21"
},
{
"introduced": "1.6.21"
},
{
"last_affected": "1.6.21"
},
{
"introduced": "1.6.22"
},
{
"last_affected": "1.6.22"
},
{
"introduced": "1.6.22"
},
{
"last_affected": "1.6.22"
},
{
"introduced": "1.6.23"
},
{
"last_affected": "1.6.23"
},
{
"introduced": "1.6.23"
},
{
"last_affected": "1.6.23"
},
{
"introduced": "1.6.25"
},
{
"last_affected": "1.6.25"
},
{
"introduced": "1.6.25"
},
{
"last_affected": "1.6.25"
},
{
"introduced": "1.6.26"
},
{
"last_affected": "1.6.26"
},
{
"introduced": "1.6.26"
},
{
"last_affected": "1.6.26"
},
{
"introduced": "1.6.27"
},
{
"last_affected": "1.6.27"
},
{
"introduced": "1.6.27"
},
{
"last_affected": "1.6.27"
},
{
"introduced": "1.6.28"
},
{
"last_affected": "1.6.28"
},
{
"introduced": "1.6.28"
},
{
"last_affected": "1.6.28"
},
{
"introduced": "1.6.29"
},
{
"last_affected": "1.6.29"
},
{
"introduced": "1.6.29"
},
{
"last_affected": "1.6.29"
},
{
"introduced": "1.6.30"
},
{
"last_affected": "1.6.30"
},
{
"introduced": "1.6.30"
},
{
"last_affected": "1.6.30"
},
{
"introduced": "1.6.31"
},
{
"last_affected": "1.6.31"
},
{
"introduced": "1.6.31"
},
{
"last_affected": "1.6.31"
},
{
"introduced": "1.6.32"
},
{
"last_affected": "1.6.32"
},
{
"introduced": "1.6.32"
},
{
"last_affected": "1.6.32"
},
{
"introduced": "1.6.33"
},
{
"last_affected": "1.6.33"
},
{
"introduced": "1.6.33"
},
{
"last_affected": "1.6.33"
},
{
"introduced": "1.6.34"
},
{
"last_affected": "1.6.34"
},
{
"introduced": "1.6.34"
},
{
"last_affected": "1.6.34"
},
{
"introduced": "1.6.35"
},
{
"last_affected": "1.6.35"
},
{
"introduced": "1.6.35"
},
{
"last_affected": "1.6.35"
},
{
"introduced": "1.6.36"
},
{
"last_affected": "1.6.36"
},
{
"introduced": "1.6.36"
},
{
"last_affected": "1.6.36"
},
{
"introduced": "1.6.37"
},
{
"last_affected": "1.6.37"
},
{
"introduced": "1.6.37"
},
{
"last_affected": "1.6.37"
},
{
"introduced": "1.6.38"
},
{
"last_affected": "1.6.38"
},
{
"introduced": "1.6.38"
},
{
"last_affected": "1.6.38"
},
{
"introduced": "1.6.39"
},
{
"last_affected": "1.6.39"
},
{
"introduced": "1.6.39"
},
{
"last_affected": "1.6.39"
},
{
"introduced": "1.7.3"
},
{
"last_affected": "1.7.3"
},
{
"introduced": "1.7.3"
},
{
"last_affected": "1.7.3"
},
{
"introduced": "1.7.4"
},
{
"last_affected": "1.7.4"
},
{
"introduced": "1.7.4"
},
{
"last_affected": "1.7.4"
},
{
"introduced": "1.7.5"
},
{
"last_affected": "1.7.5"
},
{
"introduced": "1.7.5"
},
{
"last_affected": "1.7.5"
},
{
"introduced": "1.7.6"
},
{
"last_affected": "1.7.6"
},
{
"introduced": "1.7.6"
},
{
"last_affected": "1.7.6"
},
{
"introduced": "1.7.7"
},
{
"last_affected": "1.7.7"
},
{
"introduced": "1.7.7"
},
{
"last_affected": "1.7.7"
},
{
"introduced": "1.7.8"
},
{
"last_affected": "1.7.8"
},
{
"introduced": "1.7.8"
},
{
"last_affected": "1.7.8"
},
{
"introduced": "1.7.9"
},
{
"last_affected": "1.7.9"
},
{
"introduced": "1.7.9"
},
{
"last_affected": "1.7.9"
},
{
"introduced": "1.7.10"
},
{
"last_affected": "1.7.10"
},
{
"introduced": "1.7.10"
},
{
"last_affected": "1.7.10"
},
{
"introduced": "1.7.11"
},
{
"last_affected": "1.7.11"
},
{
"introduced": "1.7.11"
},
{
"last_affected": "1.7.11"
},
{
"introduced": "1.7.12"
},
{
"last_affected": "1.7.12"
},
{
"introduced": "1.7.12"
},
{
"last_affected": "1.7.12"
},
{
"introduced": "1.7.13"
},
{
"last_affected": "1.7.13"
},
{
"introduced": "1.7.13"
},
{
"last_affected": "1.7.13"
},
{
"introduced": "1.7.14"
},
{
"last_affected": "1.7.14"
},
{
"introduced": "1.7.14"
},
{
"last_affected": "1.7.14"
},
{
"introduced": "1.7.15"
},
{
"last_affected": "1.7.15"
},
{
"introduced": "1.7.15"
},
{
"last_affected": "1.7.15"
},
{
"introduced": "1.7.16"
},
{
"last_affected": "1.7.16"
},
{
"introduced": "1.7.16"
},
{
"last_affected": "1.7.16"
},
{
"introduced": "1.7.17"
},
{
"last_affected": "1.7.17"
},
{
"introduced": "1.7.17"
},
{
"last_affected": "1.7.17"
},
{
"introduced": "1.7.18"
},
{
"last_affected": "1.7.18"
},
{
"introduced": "1.7.18"
},
{
"last_affected": "1.7.18"
},
{
"introduced": "1.7.19"
},
{
"last_affected": "1.7.19"
},
{
"introduced": "1.7.19"
},
{
"last_affected": "1.7.19"
},
{
"introduced": "1.7.20"
},
{
"last_affected": "1.7.20"
},
{
"introduced": "1.7.20"
},
{
"last_affected": "1.7.20"
}
],
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.20:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.21:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.22:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.23:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.25:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.26:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.27:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.28:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.29:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.30:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.31:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.32:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.33:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.34:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.35:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.36:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.37:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.38:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.39:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.14:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.15:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.16:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.17:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.18:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.19:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.20:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.9:*:*:*:*:*:*:*"
]
},
{
"vendor_product": "pivotal_software:cloud_foundry_ops_manager",
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "1.7.0"
},
{
"last_affected": "1.7.0"
},
{
"introduced": "1.7.1"
},
{
"last_affected": "1.7.1"
},
{
"introduced": "1.7.2"
},
{
"last_affected": "1.7.2"
},
{
"introduced": "1.7.3"
},
{
"last_affected": "1.7.3"
},
{
"introduced": "1.7.4"
},
{
"last_affected": "1.7.4"
},
{
"introduced": "1.7.5"
},
{
"last_affected": "1.7.5"
},
{
"introduced": "1.7.6"
},
{
"last_affected": "1.7.6"
},
{
"introduced": "1.7.7"
},
{
"last_affected": "1.7.7"
},
{
"introduced": "1.7.8"
},
{
"last_affected": "1.7.8"
},
{
"introduced": "1.7.9"
},
{
"last_affected": "1.7.9"
},
{
"introduced": "1.7.10"
},
{
"last_affected": "1.7.10"
},
{
"introduced": "1.7.11"
},
{
"last_affected": "1.7.11"
},
{
"introduced": "1.7.12"
},
{
"last_affected": "1.7.12"
},
{
"introduced": "1.8.0"
},
{
"last_affected": "1.8.0"
}
],
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.7.9:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_ops_manager:1.8.0:*:*:*:*:*:*:*"
]
}
]
}{
"cpe": [
"cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.8.0:*:*:*:*:*:*:*"
],
"source": [
"CPE_RANGE",
"CPE_STRING"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "3.7.0"
},
{
"introduced": "1.6.0"
},
{
"last_affected": "1.6.0"
},
{
"introduced": "1.6.1"
},
{
"last_affected": "1.6.1"
},
{
"introduced": "1.6.2"
},
{
"last_affected": "1.6.2"
},
{
"introduced": "1.6.3"
},
{
"last_affected": "1.6.3"
},
{
"introduced": "1.6.4"
},
{
"last_affected": "1.6.4"
},
{
"introduced": "1.6.5"
},
{
"last_affected": "1.6.5"
},
{
"introduced": "1.7.0"
},
{
"last_affected": "1.7.0"
},
{
"introduced": "1.7.1"
},
{
"last_affected": "1.7.1"
},
{
"introduced": "1.7.2"
},
{
"last_affected": "1.7.2"
},
{
"introduced": "1.8.0"
},
{
"last_affected": "1.8.0"
}
]
}