{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.7.4.16 (2.7.x), 3.6.10 (3.6.x), 3.9.12 (3.9.x) or 3.17.0 (3.17.x) or later.","affected":[{"fixed":"2.7.4.16","introduced":"2.0.0"},{"fixed":"3.6.10","introduced":"3.0.0"},{"fixed":"3.9.12","introduced":"3.7.0"},{"fixed":"3.17.0","introduced":"3.10.0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2017-4991"],"ecosystem":"Maven","epss":0.00936,"exploited":false,"fixed_versions":["2.7.4.16","3.6.10","3.9.12","3.17.0"],"ghsa_id":"GHSA-cgrg-x34r-78f3","id":"tcs_01M5N8SDGXEWB7PCA76VJNFJ9X","modified_at":"2024-03-01T20:26:39.553343Z","published_at":"2022-05-13T01:07:26Z","references":["https://osv.dev/vulnerability/GHSA-cgrg-x34r-78f3","https://nvd.nist.gov/vuln/detail/CVE-2017-4991","https://github.com/cloudfoundry/uaa/commit/2ca35f1723e039aa7d2318134b05d02e40072a18","https://github.com/cloudfoundry/uaa/commit/ba23bcf109704ab2eae519b705d7b2a75e023553","https://github.com/cloudfoundry/uaa/commit/bbf6751bc0d87c4a3aaf21b54e26ce328ab998b3","https://github.com/cloudfoundry/uaa/commit/eb3f86054489039e11eabd54a8ec9a46c22abfc8","https://github.com/cloudfoundry/uaa","https://www.cloudfoundry.org/cve-2017-4991"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-cgrg-x34r-78f3","url":"https://osv.dev/vulnerability/GHSA-cgrg-x34r-78f3"}],"summary":"Cloud Foundry UAA password reset vulnerability"}