high7.1
CVE-2019-3775
Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address.
Impact
Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Uaa Release | before 70.0 |