The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloud_foundry_uaa_bosh | Cloudfoundry | * | 16.0 (including) |
| Cloud_foundry | Pivotal_software | * | 242.0 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.0 (including) | 1.6.0 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.1 (including) | 1.6.1 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.2 (including) | 1.6.2 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.3 (including) | 1.6.3 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.4 (including) | 1.6.4 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.5 (including) | 1.6.5 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.6 (including) | 1.6.6 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.7 (including) | 1.6.7 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.8 (including) | 1.6.8 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.9 (including) | 1.6.9 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.10 (including) | 1.6.10 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.11 (including) | 1.6.11 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.12 (including) | 1.6.12 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.13 (including) | 1.6.13 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.14 (including) | 1.6.14 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.15 (including) | 1.6.15 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.17 (including) | 1.6.17 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.18 (including) | 1.6.18 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.19 (including) | 1.6.19 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.20 (including) | 1.6.20 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.21 (including) | 1.6.21 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.22 (including) | 1.6.22 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.23 (including) | 1.6.23 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.25 (including) | 1.6.25 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.26 (including) | 1.6.26 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.27 (including) | 1.6.27 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.28 (including) | 1.6.28 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.29 (including) | 1.6.29 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.30 (including) | 1.6.30 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.31 (including) | 1.6.31 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.32 (including) | 1.6.32 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.33 (including) | 1.6.33 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.34 (including) | 1.6.34 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.35 (including) | 1.6.35 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.36 (including) | 1.6.36 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.37 (including) | 1.6.37 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.38 (including) | 1.6.38 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.39 (including) | 1.6.39 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.0 (including) | 1.7.0 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.1 (including) | 1.7.1 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.2 (including) | 1.7.2 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.3 (including) | 1.7.3 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.4 (including) | 1.7.4 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.5 (including) | 1.7.5 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.6 (including) | 1.7.6 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.7 (including) | 1.7.7 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.8 (including) | 1.7.8 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.9 (including) | 1.7.9 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.10 (including) | 1.7.10 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.11 (including) | 1.7.11 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.12 (including) | 1.7.12 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.13 (including) | 1.7.13 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.14 (including) | 1.7.14 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.15 (including) | 1.7.15 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.16 (including) | 1.7.16 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.17 (including) | 1.7.17 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.18 (including) | 1.7.18 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.19 (including) | 1.7.19 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.20 (including) | 1.7.20 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.0 (including) | 1.8.0 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.0 (including) | 1.7.0 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.1 (including) | 1.7.1 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.2 (including) | 1.7.2 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.3 (including) | 1.7.3 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.4 (including) | 1.7.4 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.5 (including) | 1.7.5 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.6 (including) | 1.7.6 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.7 (including) | 1.7.7 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.8 (including) | 1.7.8 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.9 (including) | 1.7.9 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.10 (including) | 1.7.10 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.11 (including) | 1.7.11 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.7.12 (including) | 1.7.12 (including) |
| Cloud_foundry_ops_manager | Pivotal_software | 1.8.0 (including) | 1.8.0 (including) |
| Cloud_foundry_uaa | Pivotal_software | * | 3.7.0 (including) |