Description
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.
Remediation
References
https://pivotal.io/security/cve-2015-5170-5173
Related Vulnerabilities
CVE-2022-34271 Vulnerability in maven package org.apache.atlas:atlas-intg
CVE-2019-3772 Vulnerability in maven package org.springframework.integration:spring-integration-ws
CVE-2022-2256 Vulnerability in maven package org.keycloak:keycloak-themes
CVE-2018-1999039 Vulnerability in maven package org.jenkins-ci.plugins:confluence-publisher
CVE-2023-29523 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore