NVD

Id
86328  
Name
CVE-2015-3189  
Description
With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-06-12  
Published
2017-05-25  
Modified Date
2017-06-07  
Seq
2015-3189  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419318 86328 CVE-2017-7398 http://seclists.org/fulldisclosure/2017/Apr/4  View
422973 86328 CVE-2017-2157 JVN#39605485  View
422974 86328 CVE-2017-2157 https://www.jpki.go.jp/download/win.html#dl  View
422975 86328 CVE-2017-2157 JVN#39605485  View
422976 86328 CVE-2017-2157 https://www.jpki.go.jp/download/win.html#dl  View

Related JVN