Pivotal Spring Security OAuth CVE-2018-1260 Remote Code Execution Vulnerability

Bugtraq ID: 104158
Class: Input Validation Error
CVE: CVE-2018-1260
Remote: Yes
Local: No
Published: May 09 2018 12:00AM
Updated: May 09 2018 12:00AM
Credit: Philippe Arteau from GoSecure
Vulnerable: Pivotal Spring Security OAuth 2.3.2
Pivotal Spring Security OAuth 2.2.1
Pivotal Spring Security OAuth 2.1.1
Pivotal Spring Security OAuth 2.0.14
Pivotal Spring Security OAuth 2.0.10
Pivotal Spring Security OAuth 2.0.9
Pivotal Spring Security OAuth 2.0.8
Pivotal Spring Security OAuth 2.0.7
Pivotal Spring Security OAuth 2.0.6
Pivotal Spring Security OAuth 2.0.5
Pivotal Spring Security OAuth 2.0.4
Pivotal Spring Security OAuth 2.0.3
Pivotal Spring Security OAuth 2.0.2
Pivotal Spring Security OAuth 2.0.1
Pivotal Spring Security OAuth 2.0
Pivotal Spring Security OAuth 1.0.5
Pivotal Spring Security OAuth 1.0.4
Pivotal Spring Security OAuth 1.0.3
Pivotal Spring Security OAuth 1.0.1
Pivotal Spring Security OAuth 1.0
Pivotal Spring Security OAuth 2.3
Pivotal Spring Security OAuth 2.2
Pivotal Spring Security OAuth 2.1
Not Vulnerable: Pivotal Spring Security OAuth 2.3.3
Pivotal Spring Security OAuth 2.2.2
Pivotal Spring Security OAuth 2.1.2
Pivotal Spring Security OAuth 2.0.15


 

Privacy Statement
Copyright 2010, SecurityFocus