CVE-2015-3189
1 advisory.
Maven/org.cloudfoundry.identity:cloudfoundry-identity-server CVE-2015-3189: low 3.7, EPSS 0.82%
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Action: Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.2.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.5 | - |
Fixed versions
| 2.2.5 |
Sources
- osv: GHSA-fj69-p8f6-q97h
- https://nvd.nist.gov/vuln/detail/CVE-2015-3189
- https://github.com/cloudfoundry/uaa/commit/a79b89f6e4f66626914b029b7a15a423491f8013
- https://github.com/cloudfoundry/uaa
- https://github.com/cloudfoundry/uaa/commits/2.2.5
- https://github.com/cloudfoundry/uaa/compare/2.2.4...2.2.5
- https://github.com/cloudfoundry/uaa/compare/2.2.5...2.2.6
- https://pivotal.io/security/cve-2015-3189
CVE-2015-3189 · published · modified · JSON