Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-1262
HistoryMay 15, 2018 - 8:29 p.m.

CVE-2018-1262

2018-05-1520:29:00
[email protected]
web.nvd.nist.gov
3

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation.

Affected configurations

Nvd
Node
pivotal_softwarecloud_foundry_uaaMatch4.12.0
OR
pivotal_softwarecloud_foundry_uaaMatch4.12.1
OR
pivotal_softwarecloud_foundry_uaaMatch4.12.2
OR
pivotal_softwarecloud_foundry_uaaMatch4.13.0
OR
pivotal_softwarecloud_foundry_uaaMatch4.13.1
OR
pivotal_softwarecloud_foundry_uaaMatch4.13.2
OR
pivotal_softwarecloud_foundry_uaaMatch4.13.3
OR
pivotal_softwarecloud_foundry_uaaMatch4.13.4
Node
pivotal_softwarecloud_foundry_uaa-releaseMatch57
OR
pivotal_softwarecloud_foundry_uaa-releaseMatch57.1
OR
pivotal_softwarecloud_foundry_uaa-releaseMatch58
Node
cloudfoundrycf-deploymentRange1.27.0–1.31.0
VendorProductVersionCPE
pivotal_softwarecloud_foundry_uaa4.12.0cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.12.0:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.12.1cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.12.1:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.12.2cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.12.2:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.13.0cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.13.0:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.13.1cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.13.1:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.13.2cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.13.2:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.13.3cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.13.3:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa4.13.4cpe:2.3:a:pivotal_software:cloud_foundry_uaa:4.13.4:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa-release57cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:57:*:*:*:*:*:*:*
pivotal_softwarecloud_foundry_uaa-release57.1cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:57.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

Related

veracode 1
osv 2
prion 1
cvelist 1
cloudfoundry 1
github 1
cve 1
veracode
veracode
Privilege Escalation
2018-05-16 03:11:22
osv
osv
CVE-2018-1262
2018-05-15 20:29:00
UAA privilege escalation across identity zones
2022-05-13 01:07:03
prion
prion
Privilege escalation
2018-05-15 20:29:00
cvelist
cvelist
CVE-2018-1262
2018-05-15 20:00:00
cloudfoundry
cloudfoundry
CVE-2018-1262: UAA privilege escalation across identity zones | Cloud Foundry
2018-05-14 00:00:00
github
github
UAA privilege escalation across identity zones
2022-05-13 01:07:03
cve
cve
CVE-2018-1262
2018-05-15 20:29:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON
Related for NVD:CVE-2018-1262
veracode1osv2prion1cvelist1cloudfoundry1github1cve1