CVE-2015-3190

CVE-2015-3190: vulnerability in Pivotal Cloud Foundry

Published · Updated

Follow this CVE+ Monitor Cloud Foundry

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.
Affected products
Pivotal · Cloud Foundry
Related CVEs — Pivotal Cloud Foundry

In the same product, most dangerous first.

CVE-2015-1834—CVE-2015-1834EPSS 1.7%CVE-2016-0761—CVE-2016-0761EPSS 1.6%CVE-2016-0780—CVE-2016-0780EPSS 1.2%CVE-2016-3084—CVE-2016-3084EPSS 1.2%CVE-2016-4435—CVE-2016-4435EPSS 0.9%CVE-2016-2165—CVE-2016-2165EPSS 0.9%