{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.5.2 or later.","affected":[{"fixed":"2.5.2","introduced":"0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2015-5172"],"ecosystem":"Maven","epss":0.01167,"exploited":false,"fixed_versions":["2.5.2"],"ghsa_id":"GHSA-cq6m-74r4-x77g","id":"tcs_01M5N8SZW4XB5042B7T0PX90SF","modified_at":"2024-02-28T21:28:31.311682Z","published_at":"2022-05-13T01:07:00Z","references":["https://osv.dev/vulnerability/GHSA-cq6m-74r4-x77g","https://nvd.nist.gov/vuln/detail/CVE-2015-5172","https://github.com/cloudfoundry/uaa/commit/cd31cc397fe17389d95b83d6a9caa46eebc54faf","https://github.com/cloudfoundry/uaa","https://pivotal.io/security/cve-2015-5170-5173"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cq6m-74r4-x77g","url":"https://osv.dev/vulnerability/GHSA-cq6m-74r4-x77g"}],"summary":"Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password"}