Description
The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions.
Remediation
References
https://pivotal.io/security/cve-2015-5170-5173
Related Vulnerabilities
CVE-2023-33946 Vulnerability in maven package com.liferay.portal:release.portal.bom
CVE-2020-13946 Vulnerability in maven package org.apache.cassandra:cassandra-all
CVE-2023-32261 Vulnerability in maven package org.jenkins-ci.plugins:dimensionsscm
CVE-2022-45382 Vulnerability in maven package org.jenkins-ci.plugins:naginator
CVE-2016-4999 Vulnerability in maven package org.dashbuilder:dashbuilder-dataset-sql