medium6.6
CVE-2018-11082
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes.
Impact
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal Software | Cloudfoundry Uaa | before 4.20.0 |
| Pivotal Software | Cloudfoundry Uaa Release | before 61.0 |