PT-2018-11281 · Spring · Spring Security Oauth

Philippe Arteau · Published 2018-05-11 · Updated 2019-03-13 · CVE-2018-1260

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring Security OAuth versions 2.0 prior to 2.0.15 Spring Security OAuth versions 2.1 prior to 2.1.2 Spring Security OAuth versions 2.2 prior to 2.2.2 Spring Security OAuth versions 2.3 prior to 2.3.3

Description The issue allows a malicious user to craft an authorization request to the "authorization endpoint" that can lead to remote code execution when the resource owner is forwarded to the "approval endpoint". This can be exploited by an attacker.

Recommendations For versions 2.0 prior to 2.0.15, update to version 2.0.15 or later. For versions 2.1 prior to 2.1.2, update to version 2.1.2 or later. For versions 2.2 prior to 2.2.2, update to version 2.2.2 or later. For versions 2.3 prior to 2.3.3, update to version 2.3.3 or later.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2018-1260

GHSA-RRPM-PJ7P-7J9Q

Affected Products

Spring Security Oauth

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2018-1260 · Security Note
• https://osv.dev/vulnerability/GHSA-rrpm-pj7p-7j9q · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1809 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2939 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1260 · Vendor Advisory
• https://pivotal.io/security/cve-2018-1260 · Vendor Advisory
• https://github.com/spring-attic/spring-security-oauth · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1260 · Note
• http://securityfocus.com/bid/104158 · Note
• https://web.archive.org/web/20200227123539/http://securityfocus.com/bid/104158 · Note
• https://github.com/advisories/GHSA-rrpm-pj7p-7j9q · Note