CveMateVulnerability intelligence

DELL EMC Cloud Controller vulnerabilities

1 vulnerability

Known vulnerabilities in DELL EMC Cloud Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2018-1195cloudfoundrycapi-release+38y ago19-03-2018 18:00

In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication.