title: UAA redirect-uri allows wildcard in the subdomain
description: Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri. Given a UAA client was configured with a wildcard in the redirect uri's subdomain, a remote malicious unauthenticated user can craft a phishing link to get a UAA access code from the victim.
problem types: CWE-601: Open Redirect
affected:
{
product: UAA Release (OSS)
vendor: Cloud Foundry
versions:
lessThan: v71.0, status: affected, version: All, versionType: custom
}
{
product: Pivotal Application Service
vendor: Pivotal
versions:
lessThan: 2.5.1, status: affected, version: 2.5, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
version: 3.0
]