CVE-2018-8012

🗓️ 21 May 2018 19:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 119 Views

No auth/authorization enforced on server join in Apache ZooKeeper before 3.4.10, 3.5.0-alpha to 3.5.3-beta

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM® Cloud Private (‪CVE-2018-8012)‬‬‬	20 Jul 201818:55	–	ibm
IBM Security Bulletins	Security Bulletin: InfoSphere Data Replication is affected by an Apache ZooKeeper open source library vulnerability	11 Feb 201916:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202014:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	24 Sep 202116:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2017-5637, CVE-2019-0201, CVE-2018-8012, CVE-2023-44981)	8 Oct 202418:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics	29 Apr 202501:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in zookeeper (CVE-2018-8012, CVE-2019-0201, CVE-2023-44981, CVE-2017-5637)	9 Jan 202603:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a public disclosed vulnerability from Apache ZooKeeper	13 Dec 201820:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Incident Forensics is vulnerable to Public disclosed vulnerability from Apache ZooKeeper (CVE-2018-8012)	4 Oct 201802:10	–	ibm

NVD

Vulners

Node

apache zookeeperRange<3.4.10

apache zookeeperRange3.5.0–3.5.3

apache zookeeperMatch3.5.0alpha

apache zookeeperMatch3.5.3beta

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

oracle goldengate_stream_analyticsRange<19.1.0.0.1

[
  {
    "product": "Apache ZooKeeper",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache ZooKeeper prior to 3.4.10, Apache ZooKeeper 3.5.0-alpha through 3.5.3-beta"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040948
debian	www.debian.org/security/2018/dsa-4214
lists	www.lists.apache.org/thread.html/r73daf1fc5d85677d9a854707e1908d14e174b7bbb0c603709c0ab33f%40%3Coak-commits.jackrabbit.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2020.html
lists	www.lists.apache.org/thread.html/r8f0d920805af93033c488af89104e2d682662bacfb8406db865d5e14%40%3Cdev.jackrabbit.apache.org%3E
lists	www.lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
lists	www.lists.apache.org/thread.html/c75147028c1c79bdebd4f8fa5db2b77da85de2b05ecc0d54d708b393%40%3Cdev.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E
lists	www.lists.apache.org/thread.html/rc5bc4ddb0deabf8cfb69378cecee56fcdc76929bea9e6373cb863870%40%3Cdev.jackrabbit.apache.org%3E
lists	www.lists.apache.org/thread.html/re3a4048e9515d4afea416df907a612ed384a16c57cf99e97ee4a12f2%40%3Cdev.jackrabbit.apache.org%3E

21 Nov 2024 04:13Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.01372

CWE-862