Security Advisory

CVE-2019-3794

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-18 15:47:00

Last updated 2024-09-16 16:28:44

Assigner dell

CVSS score 6.5

State PUBLISHED

Description

Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking attacks on UAA's frontend sites.

← Browse all CVEs View on cve.org ↗