CVE-2019-11278

CVE-2019-11278 is a high-severity vulnerability affecting Cloud Foundry UAA versions prior to 74.1.0. It allows an authenticated attacker with specific privileges ('client.write' and 'groups.update') to craft a malicious SCIM query, leading to information disclosure and ultimately an escalation of privileges to gain unauthorized control over UAA scopes. With a CVSS score of 8.8 (High), this vulnerability has a low attack complexity and can result in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.