[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faFSUVJ-DwdEdJjdyx-o6aWs9dcz2QhawOWcWP3vDHmk":3,"g5a-risk:CVE-2018-11082":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":59,"references":60,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":76,"cisaInfo":15,"otxData":15,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":115,"notableEvents":116},"CVE-2018-11082","What is CVE-2018-11082?","Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.","Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauth...","2018-10-05T21:29:00.637","2019-10-09T23:33:23.557",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":38,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"security_alert@emc.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":26,"PrivilegesRequired":26,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",6.6,"MEDIUM",0.7,[39],{"Source":18,"Type":19,"CVSSData":40,"BaseSeverity":36,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.01101,[47,47,47,47,47,47,47],"Critical",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"pivotal_software","cloudfoundry_uaa","*","cpe:2.3:a:pivotal_software:cloudfoundry_uaa:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":54,"criteria":58,"vulnerable":4},"cloudfoundry_uaa_release","cpe:2.3:a:pivotal_software:cloudfoundry_uaa_release:*:*:*:*:*:*:*:*",2,[61],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.cloudfoundry.org\u002Fblog\u002Fcve-2018-11082\u002F","Cloudfoundry",[65],"Vendor Advisory",1,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-307","Improper Restriction of Excessive Authentication Attempts","The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.","","Draft","Base","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2018-11082? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11082, a critical severity cyber security vulnerability from 2018. Cloud Foundry UAA, all versions prior to 4.20.0 and Clo...","CVE-2018-11082, CVE-2018-11082 vulnerability, CVE-2018-11082 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, pivotal_software security, cloudfoundry_uaa vulnerability, cloudfoundry_uaa_release vulnerability","\u002Fwhat-is\u002Fcve-2018-11082",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11082","Cybersecurity","CVE-2018-11082, CVE-2018-11082 vulnerability, CVE-2018-11082 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":15,"Negate":15,"Nodes":105},[106],{"Operator":107,"Negate":15,"CPEMatch":108},"OR",[109,112],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":110,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":111,"VersionEndIncluding":15},"CB908BB2-520A-43DE-9BA2-72E8D485A23B","4.20.0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":113,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":114,"VersionEndIncluding":15},"52A9DE11-CD2E-47AF-892F-F72E8F91815A","61.0",[],[],{"lastModified":11,"cacheTime":118,"version":41},1792388141143,{"score":120,"band":121,"action":122,"scoredAt":123},55,"Medium","Plan remediation","2026-10-16T06:44:56.416141+00:00"]