[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNCDqnH8D_u_GIZatBe7Rm79k-IAJqAsHcAhQwOqDrKs":3,"g5a-risk:CVE-2015-5171":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":55,"references":56,"referencesCount":64,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":27,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":117,"notableEvents":118},"CVE-2015-5171","What is CVE-2015-5171?","The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions.","The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1....","2017-10-24T17:29:00.23","2025-04-20T01:37:25.86",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01167,[39,39,39,39,39,39,39],"Critical",[43,48,52],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"cloudfoundry","cf-release","*","cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":4},"pivotal_software","cloud_foundry_elastic_runtime","cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*",{"vendor":49,"product":53,"version":46,"criteria":54,"vulnerable":4},"cloud_foundry_uaa","cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:*",3,[57,62],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fpivotal.io\u002Fsecurity\u002Fcve-2015-5170-5173","Pivotal",[61],"Vendor Advisory",{"url":58,"source":59,"tags":63},[61],2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2015-5171? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-5171, a critical severity cyber security vulnerability from 2017. The password change functionality in Cloud Foundry Runti...","CVE-2015-5171, CVE-2015-5171 vulnerability, CVE-2015-5171 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, cloudfoundry security, pivotal_software security, cf-release vulnerability, cloud_foundry_elastic_runtime vulnerability, cloud_foundry_uaa vulnerability","\u002Fwhat-is\u002Fcve-2015-5171",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-5171","Cybersecurity","CVE-2015-5171, CVE-2015-5171 vulnerability, CVE-2015-5171 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":27,"CPEMatch":107},"OR",[108,111,114],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":110,"VersionEndIncluding":27},"8E39C984-9592-4C18-A220-F3BF2FF0E4D3","216",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":113,"VersionEndIncluding":27},"349BBE7C-CB38-4F96-B42C-03982C4D6071","1.7.0",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":116,"VersionEndIncluding":27},"6FF9860B-08BA-42CA-A3C0-34BE821C47B2","2.5.2",[],[],{"lastModified":11,"cacheTime":120,"version":33},1792383553204,{"score":122,"band":123,"action":124,"scoredAt":125},54,"Medium","Plan remediation","2026-10-17T09:12:33.831853+00:00"]