Loading
Generated remediation guidance and an executive summary. No account required.
Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.
Use CWE-307, Pivotal Software vendor hub and Cloudfoundry Uaa product page to widen CVE-2018-11082 into its surrounding weakness, vendor, and product context.