CVE-2015-5171

Critical

Published: 24/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The password change functionality in Cloud Foundry Runtime before version 216, UAA before version 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before version 1.7.0 allows attackers to leverage the failure to expire existing sessions.

Risk Assessment

The failure to expire sessions may lead to unauthorized access to user accounts, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to the latest versions of Cloud Foundry Runtime, UAA, and Pivotal Cloud Foundry to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions.