Lucene search

CVE-2018-1192

🗓️ 01 Feb 2018 20:00:29Reported by [email protected]Type

Security vulnerability in Cloud Foundry Foundation prior to specific versions allowing for impersonation of logged-in user

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Prion	Code injection	1 Feb 201820:29	–	prion
Veracode	Information Disclosure	2 Feb 201801:50	–	veracode
OSV	GHSA-XG5V-696H-C3VR Cloud Foundry UAA SessionID present in Audit Event Logs	14 May 202203:41	–	osv
OSV	CVE-2018-1192	1 Feb 201820:29	–	osv
CVE	CVE-2018-1192	1 Feb 201820:29	–	cve
Github Security Blog	Cloud Foundry UAA SessionID present in Audit Event Logs	14 May 202203:41	–	github
Cvelist	CVE-2018-1192	1 Feb 201820:00	–	cvelist
Cloud Foundry	CVE-2018-1192: UAA SessionID present in Audit Event Logs \| Cloud Foundry	31 Jan 201800:00	–	cloudfoundry

Nvd

Node

pivotal_software cloud_foundry_uaaRange4.5.0–4.5.5

pivotal_software cloud_foundry_uaaRange4.7.0–4.7.4

pivotal_software cloud_foundry_uaaRange4.8.0–4.8.3

Node

pivotal_software cloud_foundry_uaa-releaseMatch45.7

pivotal_software cloud_foundry_uaa-releaseMatch52.7

pivotal_software cloud_foundry_uaa-releaseMatch53.3

Node

pivotal_software cloud_foundry_cf-releaseRange<285

Node

pivotal_software cloud_foundry_cf-deploymentRange<1.7

Source	Link
cloudfoundry	www.cloudfoundry.org/blog/cve-2018-1192/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Feb 2018 20:29Current

8.5High risk

Vulners AI Score8.5

CVSS26.5

CVSS38.8

EPSS0.00485

CWE-200