Lucene search
K

CVE-2018-1320

🗓️ 07 Jan 2019 18:00:00Reported by apacheType 
cvelist
 cvelist
🔗 www.cve.org👁 24 Views

Apache Thrift Java client library SASL negotiation bypass vulnerability

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM Integration Bus is vulnerable to a remote attack & denial of service due to Apache Thrift & Apache Commons Codec (CVE-2018-1320, CVE-2019-0205, IBM X-Force ID: 177835)
22 Mar 202317:49
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Apache Thrift security bypass vulnerability[ CVE-2018-1320]
5 Aug 202420:54
ibm
IBM Security Bulletins
Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.
15 Dec 202209:13
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
13 Apr 202120:46
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities in Apache Thrift
20 Jun 202216:01
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in libthrift affect IBM Application Performance Management products
13 Sep 202308:02
ibm
BDU FSTEC
The vulnerability of the org.apache.thrift.transport.TSaslTransport class in the Apache Thrift interface description allows a attacker to circumvent SASL protocols.
29 Oct 201900:00
bdu_fstec
BDU FSTEC
The vulnerability of the org.apache.thrift.transport.TSaslTransport class in the Apache Thrift interface description allows a perpetrator to gain unauthorized access to protected information.
26 Nov 201900:00
bdu_fstec
Chainguard
CVE-2018-1320 vulnerabilities
15 Mar 202510:12
cgr
CNVD
Apache Thrift Java client library authorization issue vulnerability
8 Jan 201900:00
cnvd
Rows per page
[
  {
    "product": "Apache Thrift",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Thrift 0.5.0 to 0.11.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation