QwikSec

Security Database

CVE

CWE

Training

CVE-2021-22098

Published: Aug 11, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites.

Vendor	Product	Versions
n/a	UAA server	affected `Cloud Foundry UAA server prior to version 75.4.0`

Weaknesses (CWE)

References

https://www.cloudfoundry.org/blog/cve-2021-22098-open-redirect-vulnerability-in-uaa-server/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.