← Back to CVE List

CVE-2015-3190

Published: 2017-05-25T17:29Z
Last Modified: 2024-11-21T02:28Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt