{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 2.2.5 or later.","affected":[{"fixed":"2.2.5","introduced":"0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2015-3189"],"ecosystem":"Maven","epss":0.00816,"exploited":false,"fixed_versions":["2.2.5"],"ghsa_id":"GHSA-fj69-p8f6-q97h","id":"tcs_01M5N8W4B0JVZ3YEENESFX152N","modified_at":"2024-02-28T18:58:31.755019Z","published_at":"2022-05-13T01:07:02Z","references":["https://osv.dev/vulnerability/GHSA-fj69-p8f6-q97h","https://nvd.nist.gov/vuln/detail/CVE-2015-3189","https://github.com/cloudfoundry/uaa/commit/a79b89f6e4f66626914b029b7a15a423491f8013","https://github.com/cloudfoundry/uaa","https://github.com/cloudfoundry/uaa/commits/2.2.5","https://github.com/cloudfoundry/uaa/compare/2.2.4...2.2.5","https://github.com/cloudfoundry/uaa/compare/2.2.5...2.2.6","https://pivotal.io/security/cve-2015-3189"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-fj69-p8f6-q97h","url":"https://osv.dev/vulnerability/GHSA-fj69-p8f6-q97h"}],"summary":"Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password"}