CVE-2018-1258
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-1258
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1258.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2018-1258
- Aliases
- Withdrawn
- 2024-05-08T06:49:59.670817Z
- Published
- 2018-05-11T20:29:00Z
- Modified
- 2023-11-28T15:47:25.109004Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.
- References
-
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securityfocus.com/bid/104222
- http://www.securitytracker.com/id/1041888
- http://www.securitytracker.com/id/1041896
- https://access.redhat.com/errata/RHSA-2019:2413
- https://pivotal.io/security/cve-2018-1258
- https://security.netapp.com/advisory/ntap-20181018-0002/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
Affected packages
Git / github.com/libfuse/libfuse
Affected ranges
- Type
- GIT
- Repo
- https://github.com/libfuse/libfuse
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedLast affectedLast affectedLast affected
Affected versions
Other
before_interruptible
debian_version_0_95-1
debian_version_1_0-1
fuse_0_9
fuse_0_95
fuse_1_1
fuse_1_1_pre2
fuse_1_9
fuse_2_2
fuse_2_2_pre1
fuse_2_2_pre4
fuse_2_2_pre5
fuse_2_2_pre6
fuse_2_3_0
fuse_2_3_pre1
fuse_2_3_pre2
fuse_2_3_pre3
fuse_2_3_pre4
fuse_2_3_pre5
fuse_2_3_pre6
fuse_2_3_pre7
fuse_2_3_rc1
fuse_2_4_0
fuse_2_4_0_pre2
fuse_2_4_0_rc1
fuse_2_4_1
fuse_2_5_0
fuse_2_5_0_pre1
fuse_2_5_0_pre2
fuse_2_6_0
fuse_2_6_0_pre1
fuse_2_6_0_pre2
fuse_2_6_0_pre3
fuse_2_6_0_rc1
fuse_2_6_0_rc2
fuse_2_6_0_rc3
fuse_2_6_1
fuse_2_7_0
fuse_2_7_0_rc1
fuse_2_7_1
fuse_2_7_2
fuse_2_7_2_before_indent
fuse_2_8_0
fuse_2_8_0_pre2
fuse_2_8_1
fuse_2_8_2
fuse_2_8_3
fuse_2_8_4
fuse_2_8_start
fuse_2_9_0
fuse_2_9_1
fuse_2_9_2
fuse_2_9_3
fuse_2_9_start
fuse_3_0_start
start
fuse-3.*
fuse-3.0.0
fuse-3.0.0pre0
fuse-3.0.0rc1
fuse-3.0.0rc2
fuse-3.0.0rc3
fuse-3.0.1
fuse-3.0.2
fuse-3.1.0
fuse-3.1.1
fuse-3.2.0