cvedb.io
CVE-2015-5172
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-10-24T17:29:00.260 · Last modified 2026-06-17T00:28:36.490

Summary

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.

Affected products

cloudfoundry — cf-release

Does this affect you?

Add your gear to cvedb and we'll alert you only when cloudfoundry ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.