← CVE Intelligence

CVE-2018-11082

Cloud Foundry UAA MFA does not prevent brute force of MFA code PUBLISHED

Description (CNA)

Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.

Affected (CNA)

Vendor / productVersions
Cloud Foundry / UAA Releaseaffected all versions before 61.0
Cloud Foundry / UAAaffected all versions before 4.20.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.