LDAP Authentication Vulnerability in UAA by Cloud Foundry

CVE-2026-47840

What is CVE-2026-47840?

A security vulnerability in UAA by Cloud Foundry allows an attacker to exploit the LDAP authentication mechanism over StartTLS. An attacker can impersonate the LDAP directory using any trusted CA certificate and harvest sensitive user credentials, including LDAP bind passwords and all user passwords transmitted during simple-bind authentication. This exploit enables unauthorized access, as the attacker can also manipulate group memberships, potentially granting themselves administrative privileges. Deployments utilizing LDAP for user authentication without implementing proper hostname verification are at high risk.

References