Approved changes feed: RSS · Atom

cpe:2.3:a:dell_emc:cloud_controller:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9)
ProductCloud Controller (90a8d7c9-b596-59d1-8daa-603ab46dd3e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1195 vulnerable 2026-06-08 05:11:17.160119 Details available
In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication.
Published: 2018-03-19T18:00:00.000Z
Updated: 2024-09-16T20:52:50.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.