Skip to content
3.9 Low

CVE-2024-38806 Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0…

Description

Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40.17.0 , potentially resulting in users retaining access rights they should not have. This can allow them to perform operations beyond their intended permissions.

Affected products and versions

Product Affected versions Fixed in
UAA Versions not published
Track this CVE