Vulnerabilities (CVE)

Filtered by vendor Pivotal Software Subscribe
Filtered by product Cloudfoundry Uaa
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-11082 1 Pivotal Software 2 Cloudfoundry Uaa, Cloudfoundry Uaa Release 2024-11-21 5.0 MEDIUM 6.6 MEDIUM
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.