← Back

Cloudfoundry Uaa

cloudfoundry_uaa

Vendor: Pivotal Software • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-11082
1Pivotal Software
2Cloudfoundry Uaa
Cloudfoundry Uaa Release
Nov 21, 2024
Oct 5, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and...Show more
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.Show less