CVSS 3.1
3.9 lowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:LCVE-2024-38806
Low (3.9). EPSS 0.1% chance of exploitation in the next 30 days.
Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40.17.0 ,
potentially resulting in users retaining access rights they should not
have. This can allow them to perform operations beyond their intended
permissions.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
- CWE
- CWE-440
- Published
- Modified
- Record from
- the NVD, synced