cloudfoundry/uaa · Security
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
- GHSA ID
- GHSA-cq6m-74r4-x77g
- CVE ID
- CVE-2015-5172
- Severity
- critical
- Published
- Updated
- CVSS
- 9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.
CWEs
- CWE-640 · Weak Password Recovery Mechanism for Forgotten Password