← Database

CVE-2026-22723

MEDIUM CVSS: 6.5 Published: 2026-03-05 Modified: 2026-06-17

Description

Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.

Affected Platforms

Cloudfoundry Cf-DeploymentCloudfoundry Uaa-Release

Weakness Type

NVD-CWE-noinfo, CWE-640, CWE-693

References