6.5Mittel
CVE-2026-22723UAA User Token Revocation logic error
Beschreibung
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| cloudfoundry | cf-deployment | 48.7.0 – ≤ 54.11.0 | |
| Cloudfoundry Foundation | UAA | 77.30.0 – ≤ v78.7.0 | |
| cloudfoundry | uaa-release | 77.30.0 – < 78.8.0 |
Referenzen und Patches
- https://www.cloudfoundry.org/blog/cve-2026-22723-uaa-user-token-revocation/ MitigationVendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 48.7.0 ≤ 54.11.0cpe:2.3:a:cloudfoundry:uaa-release:*:*:*:*:*:*:*:*≥ 77.30.0 < 78.8.0