CVE-2015-5173

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."

Published: Oct 24, 2017
Updated: Apr 13, 2023
CVE: CVE-2015-5173
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
pivotal_software / cloud_foundry_elastic_runtime	-	1.7.0
pivotal_software / cloud_foundry_uaa	-	2.5.2
cloudfoundry / cf-release	-	216

https://pivotal.io/security/cve-2015-5170-5173

Vulnerability Database

289,697

CVE-2015-5173