CVE-2018-1256

Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of the SSO Connector with tokens generated from another service plan.

CVSS v3 8.1 HIGH
CVSS v2.0 6.8 MEDIUM

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://pivotal.io/security/cve-2018-1256	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vmware:spring_cloud_sso_connector:2.1.2:*:*:*:*:*:*:*

History

12 Aug 2021, 21:30

Type	Values Removed	Values Added
CPE	cpe:2.3:a:pivotal_software:spring_cloud_sso_connector:2.1.2:::::::*	cpe:2.3:a:vmware:spring_cloud_sso_connector:2.1.2:::::::*

Information

Published : 2018-05-07 16:22

Updated : 2023-12-10 12:30

NVD link : CVE-2018-1256

Mitre link : CVE-2018-1256

CVE.ORG link : CVE-2018-1256

JSON object : View

Products Affected

vmware

spring_cloud_sso_connector

CWE

NVD-CWE-noinfo

{"id": "CVE-2018-1256", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "published": "2018-05-07T16:22:00.217", "references": [{"url": "https://pivotal.io/security/cve-2018-1256", "tags": ["Mitigation", "Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of the SSO Connector with tokens generated from another service plan."}, {"lang": "es", "value": "Spring Cloud SSO Connector 2.1.2 contiene una regresi\u00f3n que deshabilita la validaci\u00f3n de distribuidor en servidores de recursos que no est\u00e1n vinculados al servicio SSO. En despliegues PCF con m\u00faltiples planes de servicio SSO, un atacante remoto puede autenticarse en servidores de recursos no vinculados que emplean esta versi\u00f3n de SSO Connector con tokens generados de otro plan de servicio."}], "lastModified": "2021-08-12T21:30:39.237", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_cloud_sso_connector:2.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EABBE1F7-14A7-43EF-AAE8-6F8588BB6161"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}