CVE-2019-3775

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA versions prior to 70.0

Description The issue allows a remote authenticated user to impersonate a different user by changing their email address to that of a different user. This is possible because a user can update their own email address.

Recommendations For versions prior to 70.0, restrict access to email address updates to prevent impersonation until a fix is available. As a temporary workaround, consider implementing additional validation checks on email address changes to minimize the risk of exploitation.