CVE-2015-5170-5173 UAA Vulnerabilities | Cloud Foundry

🗓️ 02 May 2016 00:00:00Reported by Cloud FoundryType

cloudfoundry🔗 www.cloudfoundry.org👁 70 Views

CSRF and session vulnerability in UAA versions 2.5.1 and prio

Reporter	Title	Published	Views	Family All 32
BDU FSTEC	The software vulnerabilities of Cloud Foundry Runtime cf-release, UAA Standalone, and Pivotal Cloud Foundry Elastic Runtime – a software platform existing due to a flaw in the forgotten password recovery mechanism – allow attackers to exploit old links to reset passwords.	1 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The software vulnerabilities of Cloud Foundry Runtime cf-release, UAA Standalone, and Pivotal Cloud Foundry Elastic Runtime, a software platform of Cloud Foundry, allow attackers to exploit old sessions after password reset.	1 Feb 201800:00	–	bdu_fstec
CNVD	Pivotal Cloud Foundry Runtime cf-release, UAA and Pivotal Cloud Foundry Elastic Runtime Cross-Site Request Forgery Vulnerabilities	1 Nov 201700:00	–	cnvd
CNVD	Pivotal Cloud Foundry Multiple Product Design Vulnerabilities (CNVD-2017-35830)	1 Nov 201700:00	–	cnvd
CNVD	Pivotal Cloud Foundry Multiple Product Design Vulnerabilities (CNVD-2017-35831)	1 Nov 201700:00	–	cnvd
CNVD	Pivotal Cloud Foundry Multiple Product Design Vulnerabilities	1 Nov 201700:00	–	cnvd
CVE	CVE-2015-5170	24 Oct 201717:00	–	cve
CVE	CVE-2015-5171	24 Oct 201717:00	–	cve
CVE	CVE-2015-5172	24 Oct 201717:00	–	cve
CVE	CVE-2015-5173	24 Oct 201717:00	–	cve

02 May 2016 00:00Current

9.2Critical risk

Vulners AI Score9.2

CVSS 27.5

CVSS 3.19.8

EPSS0.01167

csrf attack user account password change session management cross-domain leakage vulnerabilities cloud foundry uaa cve-2015-5170 cve-2015-5171 cve-2015-5172 cve-2015-5173 saml ldap