High severity · published Feb 1, 2018
CVE-2018-1192
In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x…
8.8
CVSS
1%
EPSS
No
On KEV
Description
In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3, the SessionID is logged in audit event logs. An attacker can use the SessionID to impersonate a logged-in user.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cloud Foundry Cf-deployment · Pivotal Software
before 1.7 · source: NVD
CF
Cloud Foundry Cf-release · Pivotal Software
before 285 · source: NVD
CF
Cloud Foundry Uaa · Pivotal Software
4.5.0 before 4.5.5; 4.7.0 before 4.7.4; 4.8.0 before 4.8.3 · source: NVD
CF
Cloud Foundry Uaa-release · Pivotal Software
45.7; 52.7; 53.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1192
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1192
Vendor Advisory
https://www.cloudfoundry.org/blog/cve-2018-1192/
More from Cloud Foundry Cf-deployment
7.4
CVE-2020-5399
Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS