NVD

Id
86330  
Name
CVE-2015-3191  
Description
With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user logged into a cloud foundry instance via a malicious link on a attacker controlled site. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-12  
Published
2017-05-25  
Modified Date
2017-06-07  
Seq
2015-3191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419321 86330 CVE-2017-7401 97321  View
419322 86330 CVE-2017-7401 https://github.com/collectd/collectd/issues/2174  View
422983 86330 CVE-2017-2162 JVNDB-2017-000091  View
422984 86330 CVE-2017-2162 http://www.toshiba-personalstorage.net/news/20170516a.htm  View
422985 86330 CVE-2017-2162 JVN#81820501  View
422986 86330 CVE-2017-2162 JVNDB-2017-000091  View
422987 86330 CVE-2017-2162 http://www.toshiba-personalstorage.net/news/20170516a.htm  View
422988 86330 CVE-2017-2162 JVN#81820501  View

Related JVN