high7.5
CVE-2021-22001
In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provi…
Impact
In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type “oauth 1.0” was sent to UAA server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Cf-Deployment | before 16.18.0 |
| Cloudfoundry | User Account And Authentication | before 75.3.0 |