6.5Media
CVE-2026-22723UAA User Token Revocation logic error
Descripción
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| cloudfoundry | cf-deployment | 48.7.0 – ≤ 54.11.0 | |
| Cloudfoundry Foundation | UAA | 77.30.0 – ≤ v78.7.0 | |
| cloudfoundry | uaa-release | 77.30.0 – < 78.8.0 |
Referencias y parches
- https://www.cloudfoundry.org/blog/cve-2026-22723-uaa-user-token-revocation/ MitigationVendor Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 48.7.0 ≤ 54.11.0cpe:2.3:a:cloudfoundry:uaa-release:*:*:*:*:*:*:*:*≥ 77.30.0 < 78.8.0