6.5Orta
CVE-2026-22723UAA User Token Revocation logic error
Açıklama
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| cloudfoundry | cf-deployment | 48.7.0 – ≤ 54.11.0 | |
| Cloudfoundry Foundation | UAA | 77.30.0 – ≤ v78.7.0 | |
| cloudfoundry | uaa-release | 77.30.0 – < 78.8.0 |
Kaynaklar ve yamalar
- https://www.cloudfoundry.org/blog/cve-2026-22723-uaa-user-token-revocation/ MitigationVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*≥ 48.7.0 ≤ 54.11.0cpe:2.3:a:cloudfoundry:uaa-release:*:*:*:*:*:*:*:*≥ 77.30.0 < 78.8.0