CVE-2018-15761: Pivotal Software Cloud Foundry Uaa

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.

Affected products

• Pivotal Software Cloud Foundry Uaa: before 4.23.0 (fixed in 4.23.0)
• Pivotal Software Cloudfoundry Uaa Release: before 64.0 (fixed in 64.0)

Published 2018-11-19. Last modified 2026-06-17.