Description

The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions.

Remediation

References

https://pivotal.io/security/cve-2015-5170-5173

Related Vulnerabilities

CVE-2023-35158 Vulnerability in maven package org.xwiki.platform:xwiki-platform-flamingo-skin-resources

CVE-2014-7810 Vulnerability in maven package org.mortbay.jasper:apache-el

CVE-2020-1729 Vulnerability in maven package io.smallrye.config:smallrye-config

CVE-2017-1000387 Vulnerability in maven package org.jenkins-ci.plugins:build-publisher

CVE-2020-2281 Vulnerability in maven package org.6wind.jenkins:lockable-resources

Severity

Critical

Classification

CWE-613 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Vendor Advisory