VULNERABILITY INTELLIGENCE

CVE-2015-5172

CVSS score9.8 CRITICAL
EPSS probability1.17%
CISA KEVNot currently listed
Published2017-10-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.

Weakness classification

  • CWE-640: Weak Password Recovery Mechanism for Forgotten Password

Primary references