Pivotal Software Cloudfoundry Uaa Release vulnerabilities

2 CVEs affecting Pivotal Software Cloudfoundry Uaa Release, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15761, published 2018-11-19.

More from Pivotal Software.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15761, published 2018-11-19. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the…
• CVE-2018-11082, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of…