CVE-2015-5173

HIGH

Cloud Foundry Runtime cf-release < 216 - Exposure of Sensitive Information via Password Recovery Email Referer Leakage

Title source: llm
STIX 2.1

Description

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://pivotal.io/security/cve-2015-5170-5173

Scores

CVSS v3 8.8
EPSS 0.0103
EPSS Percentile 59.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-200
Status published
Products (3)
cloudfoundry/cf-release < 216
pivotal_software/cloud_foundry_elastic_runtime < 1.7.0
pivotal_software/cloud_foundry_uaa < 2.5.2
Published Oct 24, 2017
Tracked Since Feb 18, 2026