CVE-2015-5172

Critical

Published: 24/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Cloud Foundry Runtime before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to leverage unspecified impact by failing to expire password reset links.

Risk Assessment

The failure to expire password reset links may lead to unauthorized access to user accounts, posing a serious threat to data security within the organization.

Recommendation

It is recommended to upgrade to the latest versions of Cloud Foundry Runtime, UAA, and Pivotal Cloud Foundry to mitigate this vulnerability.

Original NVD description (English source)

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.