Executive brief
Cloud Foundry UAA reset password vulnerable to brute force attack
Affected products
- Maven org.cloudfoundry.identity:cloudfoundry-identity-server
Junglewise Threat Intelligence
CVE-2016-3084: Cloud Foundry UAA reset password vulnerable to brute force attack
CVE-2016-3084 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: org.cloudfoundry.identity:cloudfoundry-identity-server (Maven). Vendors: Maven.
Related threats
- Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78
- Cloud Foundry UAA Privilege Escalation
- Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint
- Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
- Cloud Foundry Runtime Insufficient Session Expiration vulnerability