Private Key Exposure in Cloud Foundry UAA Software

CVE-2025-22246

What is CVE-2025-22246?

Cloud Foundry UAA versions from v77.21.0 to v7.31.0 exhibit a vulnerability that allows for private key exposure within system logs. This incident can potentially lead to unauthorized access, as sensitive keys are inadvertently logged, posing significant security challenges for users relying on the UAA framework for authentication and authorization processes. It is crucial for organizations using affected versions to assess their exposure and promptly implement necessary mitigations.

References