https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 07:22:31 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-09727 cnvd-2017-09727 https://cve.radiocsirt.org/vuln/cnvd-2017-09727 https://cve.radiocsirt.org/vuln/euvd-2026-83402 EUVD-2026-83402 https://cve.radiocsirt.org/vuln/euvd-2026-83402 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3084 <p>The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.</p> <p>The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-3084 https://cve.radiocsirt.org/vuln/ghsa-fm5c-2rwc-887w <p><strong>Affected:</strong> Maven: org.cloudfoundry.identity:cloudfoundry-identity-server</p> <p>The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.</p> <p><strong>Affected:</strong> Maven: org.cloudfoundry.identity:cloudfoundry-identity-server</p> <p>The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.</p> https://cve.radiocsirt.org/vuln/ghsa-fm5c-2rwc-887w https://cve.radiocsirt.org/vuln/gsd-2016-3084 gsd-2016-3084 https://cve.radiocsirt.org/vuln/gsd-2016-3084