onyx --cves cve-2018-1258
CVE-2018-1258
- score
- <0.1
- cvss
- 8.8
- epss
- 2.5%
- published
- 2018-05-11
- kev added
- —
- first seen
Spring Framework 5.0.5 in combination with any version of Spring Security contains an authorization bypass caused by flawed method security implementation, letting unauthorized users access restricted methods, exploit requires attacker to be authenticated.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 16
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://pivotal.io/security/cve-2018-1258
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securityfocus.com/bid/104222
- http://www.securitytracker.com/id/1041896
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- https://security.netapp.com/advisory/ntap-20181018-0002/
- http://www.securitytracker.com/id/1041888
- https://access.redhat.com/errata/RHSA-2019:2413
- https://www.oracle.com/security-alerts/cpuapr2020.html