CVE-2018-11082

Summary

Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.

Affected Software

VendorProductVersion RangeStatus
Cloud FoundryUAA Releaseall versions < 61.0affected
Cloud FoundryUAAall versions < 4.20.0affected

Weaknesses

  • Improper Access Control

ADP Enrichment

CVE Program Container

Additional References

References