[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDSsqmkcQcjT3WcDByhy3IOAFmE6C0pxpgDaXv7HEXRA":3,"g5a-risk:CVE-2019-11293":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":27,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":61,"references":62,"referencesCount":68,"weaknesses":69,"weaknessesCount":68,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":117,"notableEvents":118},"CVE-2019-11293","What is CVE-2019-11293?","Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authentication is provided via query parameters.","Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remo...","2019-12-06T20:15:09.577","2019-12-12T17:22:20.473",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":38},"security@pivotal.io","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",8.8,5.9,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":22,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":26,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",3.5,6.8,2.9,0.01316,[49,49,49,49,49,49,49],"Medium",[53,58],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"cloudfoundry","cf-deployment","*","cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":56,"criteria":60,"vulnerable":4},"user_account_and_authentication","cpe:2.3:a:cloudfoundry:user_account_and_authentication:*:*:*:*:*:*:*:*",2,[63],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fwww.cloudfoundry.org\u002Fblog\u002Fcve-2019-11293","Cloudfoundry",[67],"Vendor Advisory",1,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2019-11293? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-11293, a medium severity cyber security vulnerability from 2019. Cloud Foundry UAA Release, versions prior to v74.10.0, wh...","CVE-2019-11293, CVE-2019-11293 vulnerability, CVE-2019-11293 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cloudfoundry security, cf-deployment vulnerability, user_account_and_authentication vulnerability","\u002Fwhat-is\u002Fcve-2019-11293",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-11293","Cybersecurity","CVE-2019-11293, CVE-2019-11293 vulnerability, CVE-2019-11293 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":27,"Negate":27,"Nodes":107},[108],{"Operator":109,"Negate":27,"CPEMatch":110},"OR",[111,114],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":113,"VersionEndIncluding":27},"63D6484A-0B5A-4B81-BCD2-126BD23911AE","12.12.0",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":116,"VersionEndIncluding":27},"37406F96-9CFA-4500-BF8A-5AE7F4371AC2","74.10.0",[],[],{"lastModified":11,"cacheTime":120,"version":42},1792383598039,{"score":122,"band":123,"action":124,"scoredAt":125},24,"Low","Monitor","2026-10-16T06:47:23.777737+00:00"]