9.8
CVE-2018-1270
- EPSS 77.25%
- Veröffentlicht 06.04.2018 13:29:00
- Zuletzt bearbeitet 21.11.2024 03:59:30
- Erkennungen
LoginSpring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Spring Framework Version < 4.3.16
VMware ≫ Spring Framework Version >= 5.0.0 < 5.0.5
Oracle ≫ Application Testing Suite Version 12.5.0.3
Oracle ≫ Application Testing Suite Version 13.1.0.1
Oracle ≫ Application Testing Suite Version 13.2.0.1
Oracle ≫ Application Testing Suite Version 13.3.0.1
Oracle ≫ Big Data Discovery Version 1.6.0
Oracle ≫ Communications Converged Application Server Version < 7.0.0.1
Oracle ≫ Communications Diameter Signaling Router Version < 8.3
Oracle ≫ Communications Performance Intelligence Center Version < 10.2.1
Oracle ≫ Communications Services Gatekeeper Version < 6.1.0.4.0
Oracle ≫ Enterprise Manager Ops Center Version 12.2.2
Oracle ≫ Enterprise Manager Ops Center Version 12.3.3
Oracle ≫ Goldengate For Big Data Version 12.2.0.1
Oracle ≫ Goldengate For Big Data Version 12.3.1.1
Oracle ≫ Goldengate For Big Data Version 12.3.2.1
Oracle ≫ Health Sciences Information Manager Version 3.0
Oracle ≫ Healthcare Master Person Index Version 3.0
Oracle ≫ Healthcare Master Person Index Version 4.0
Oracle ≫ Insurance Calculation Engine Version 10.1.1
Oracle ≫ Insurance Calculation Engine Version 10.2
Oracle ≫ Insurance Calculation Engine Version 10.2.1
Oracle ≫ Insurance Rules Palette Version 10.0
Oracle ≫ Insurance Rules Palette Version 10.1
Oracle ≫ Insurance Rules Palette Version 10.2
Oracle ≫ Insurance Rules Palette Version 11.0
Oracle ≫ Insurance Rules Palette Version 11.1
Oracle ≫ Primavera Gateway Version 15.2
Oracle ≫ Primavera Gateway Version 16.2
Oracle ≫ Primavera Gateway Version 17.12
Oracle ≫ Retail Back Office Version 14.0
Oracle ≫ Retail Back Office Version 14.1
Oracle ≫ Retail Central Office Version 14.0
Oracle ≫ Retail Central Office Version 14.1
Oracle ≫ Retail Customer Insights Version 15.0
Oracle ≫ Retail Customer Insights Version 16.0
Oracle ≫ Retail Integration Bus Version 14.0.1
Oracle ≫ Retail Integration Bus Version 14.0.2
Oracle ≫ Retail Integration Bus Version 14.0.3
Oracle ≫ Retail Integration Bus Version 14.0.4
Oracle ≫ Retail Integration Bus Version 14.1.1
Oracle ≫ Retail Integration Bus Version 14.1.2
Oracle ≫ Retail Integration Bus Version 14.1.3
Oracle ≫ Retail Integration Bus Version 15.0.0.1
Oracle ≫ Retail Integration Bus Version 15.0.1
Oracle ≫ Retail Integration Bus Version 15.0.2
Oracle ≫ Retail Integration Bus Version 16.0
Oracle ≫ Retail Integration Bus Version 16.0.1
Oracle ≫ Retail Integration Bus Version 16.0.2
Oracle ≫ Retail Open Commerce Platform Version 5.3.0
Oracle ≫ Retail Open Commerce Platform Version 6.0.0
Oracle ≫ Retail Open Commerce Platform Version 6.0.1
Oracle ≫ Retail Order Broker Version 5.1
Oracle ≫ Retail Order Broker Version 5.2
Oracle ≫ Retail Order Broker Version 15.0
Oracle ≫ Retail Order Broker Version 16.0
Oracle ≫ Retail Point-of-sale Version 14.0
Oracle ≫ Retail Point-of-sale Version 14.1
Oracle ≫ Retail Predictive Application Server Version 14.0
Oracle ≫ Retail Predictive Application Server Version 14.1
Oracle ≫ Retail Predictive Application Server Version 15.0
Oracle ≫ Retail Predictive Application Server Version 16.0
Oracle ≫ Retail Returns Management Version 14.0
Oracle ≫ Retail Returns Management Version 14.1
Oracle ≫ Retail Xstore Point Of Service Version 7.1
Oracle ≫ Service Architecture Leveraging Tuxedo Version 12.1.3.0.0
Oracle ≫ Service Architecture Leveraging Tuxedo Version 12.2.2.0.0
Oracle ≫ Tape Library Acsls Version 8.4
Debian ≫ Debian Linux Version 9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 77.25% | 0.995 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-358 Improperly Implemented Security Check for Standard
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://lists.apache.org/thread.html/6d3d34adcf3dfc48e36342aa1f18ce3c20bb8e4c458a97508d5bfed1%40%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
https://access.redhat.com/errata/RHSA-2018:2939
https://lists.apache.org/thread.html/4ed49b103f64a0cecb38064f26cbf1389afc12124653da2d35166dbe%40%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/ab825fcade0b49becfa30235b3d54f4a51bb74ea96b6c9adb5d1378c%40%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/dcf8599b80e43a6b60482607adb76c64672772dc2d9209ae2170f369%40%3Cissues.activemq.apache.org%3E
http://www.securityfocus.com/bid/103696
https://lists.debian.org/debian-lts-announce/2021/04/msg00022.html
https://pivotal.io/security/cve-2018-1270
https://www.exploit-db.com/exploits/44796/