CVE-2018-11047
CVSS V2 Medium 5
CVSS V3 High 7.5
Description
Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. Refresh tokens by design have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. This affects the administrative endpoints of the UAA. i.e. /Users, /Groups, etc. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.
Overview
- CVE ID
- CVE-2018-11047
- Assigner
- security_alert@emc.com
- Vulnerability Status
- Analyzed
- Published Version
- 2018-07-24T19:29:00
- Last Modified Date
- 2019-10-03T00:03:26
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:* | 1 | OR | 4.5.0 | 4.5.7 |
| cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:* | 1 | OR | 4.7.0 | 4.7.6 |
| cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:* | 1 | OR | 4.10.0 | 4.10.2 |
| cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:* | 1 | OR | 4.12.0 | 4.12.4 |
| cpe:2.3:a:pivotal_software:cloud_foundry_uaa:*:*:*:*:*:*:*:* | 1 | OR | 4.19.0 | 4.19.2 |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:N/C:N/I:P/A:N
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- PARTIAL
- Availability Impact
- NONE
- Base Score
- 5
- Severity
- MEDIUM
- Exploitability Score
- 10
- Impact Score
- 2.9
CVSS Version 3
- Version
- 3.0
- Vector String
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality Impact
- NONE
- Availability Impact
- NONE
- Base Score
- 7.5
- Base Severity
- HIGH
- Exploitability Score
- 3.9
- Impact Score
- 3.6
References
| Reference URL | Reference Tags |
|---|---|
| https://www.cloudfoundry.org/blog/cve-2018-11047/ | Mitigation Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2018-11047 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11047 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 17:31:31 | Added to TrackCVE | |||
| 2022-12-03 10:29:05 | secure@dell.com | security_alert@emc.com | CVE Assigner | updated |
| 2022-12-03 10:29:05 | 2018-07-24T19:29Z | 2018-07-24T19:29:00 | CVE Published Date | updated |
| 2022-12-03 10:29:05 | 2019-10-03T00:03:26 | CVE Modified Date | updated | |
| 2022-12-03 10:29:05 | Analyzed | Vulnerability Status | updated |