Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款Pivotal产品安全漏洞
Vulnerability Description
Pivotal Cloud Foundry等是美国Pivotal Software公司的产品，其中Pivotal Cloud Foundry一套开源的平台即服务（PaaS）云计算平台，它提供容器调度、持续交付和自动化服务部署等功能。Pivotal Elastic Runtime是Pivotal Cloud Foundry的一个运行环境。 多款Pivotal产品中的UAA reset password flow存在安全漏洞。攻击者可利用该漏洞实施暴力破解攻击。以下产品和版本受到影响：Cloud Foundr
CVSS Information
N/A
Vulnerability Type
N/A