{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 3.3.0.1 or later.","affected":[{"fixed":"3.3.0.1","introduced":"0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2016-3084"],"ecosystem":"Maven","epss":0.0119,"exploited":false,"fixed_versions":["3.3.0.1"],"ghsa_id":"GHSA-fm5c-2rwc-887w","id":"tcs_01M5N8W9QTWX49D98SF46E1QE0","modified_at":"2024-12-05T05:26:00.892482Z","published_at":"2022-05-13T01:07:24Z","references":["https://osv.dev/vulnerability/GHSA-fm5c-2rwc-887w","https://nvd.nist.gov/vuln/detail/CVE-2016-3084","https://github.com/cloudfoundry/uaa/commit/14350228989e2aee900b8d48a848293bb5152b6f","https://github.com/cloudfoundry/uaa/commit/1d3ad7399d010f6a29dc3bf8139d792121301ab8","https://github.com/cloudfoundry/uaa/commit/460627ed419e4227b10ff121248b3ffc009011a9","https://github.com/cloudfoundry/uaa/commit/4a119d314744460ed56bcd740b2e913bf3f560c1","https://github.com/cloudfoundry/uaa/commit/5c2377487bef9d716d5c8e5717df1fc00bc7b000","https://github.com/cloudfoundry/uaa/commit/66132926f1bac0b878da5841be2f93fa5075d88f","https://github.com/cloudfoundry/uaa/commit/b3834364ab573e9655348193780a56a602fe87b7","https://github.com/cloudfoundry/uaa","https://pivotal.io/security/cve-2016-3084"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-fm5c-2rwc-887w","url":"https://osv.dev/vulnerability/GHSA-fm5c-2rwc-887w"}],"summary":"Cloud Foundry UAA reset password vulnerable to brute force attack"}