Not rated

CVE-2021-22098 UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability

Description

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites.

Affected products and versions

Product	Affected versions	Fixed in
UAA server	Versions not published

Do you use UAA server?

Track this CVE Watch UAA server Check my SBOMs

www.cveye.io/en/cve/CVE-2021-22098

Timeline

Published August 11, 2021
Last modified August 3, 2024

References

www.cloudfoundry.org www.cloudfoundry.org

Track this CVE