Pivotal Software Cloudfoundry Uaa vulnerabilities

1 known vulnerability affecting pivotal_software/cloudfoundry_uaa.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2018-11082CRITICALCVSS 9.8fixed in 4.20.02018-10-05

CVE-2018-11082 [CRITICAL] CWE-307 CVE-2018-11082: Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.