Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.
CPE | Name | Operator | Version |
---|---|---|---|
cf-release | lt | 216 | |
cloud_foundry_elastic_runtime | lt | 1.7.0 | |
cloud_foundry_uaa | lt | 2.5.2 |