Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-1320

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

Published

2019-01-07T17:29:00.360

Last Modified

2024-11-21T03:59:37.200

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-295
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache thrift ≤ 0.11.0 Yes
Operating System debian debian_linux 8.0 Yes
Application f5 traffix_signaling_delivery_controller ≤ 5.1.0 Yes
Application oracle global_lifecycle_management_opatch < 11.2.0.3.23 Yes
Application oracle global_lifecycle_management_opatch < 12.2.0.1.19 Yes
Application oracle global_lifecycle_management_opatch < 13.9.4.2.1 Yes
Application oracle nosql_database < 19.3.12 Yes
References