VDB
CVE-2018-11041
CVE-2018-11041
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Cloud Foundry UAA open redirect
EPSS 0.85% · 54.7th percentile
Risk Scores
CVSS 3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.85%
54.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| pivotal_software | cloud_foundry_uaa | 4.6.0, 4.10.1, 4.7.5 |
| Cloud Foundry | Cloud Foundry UAA | later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 |
| Maven | org.cloudfoundry.identity:cloudfoundry-identity-server | 4.13.0, 4.11.0, 4.8.0 |
| pivotal_software | cloud_foundry_uaa-release | 55.1, 48, 52.9 |
Timeline
- Jun 25, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
References
- https://www.cloudfoundry.org/blog/cve-2018-11041/ url
- https://nvd.nist.gov/vuln/detail/CVE-2018-11041 advisory
- https://github.com/cloudfoundry/uaa/commit/238ce572fdaebbb8357b265d2f77eb9761199a09 url
- https://github.com/cloudfoundry/uaa/commit/57a15dfb7e0e3a59019ebe951793b586512b196 url
- https://github.com/cloudfoundry/uaa/commit/7a8f157f7e2feed2d0ebb63b163ff735b6340b9 url
- https://github.com/cloudfoundry/uaa/commit/7d750e036cd52c5d30e73e28cbcae23126d7154 url
- https://github.com/cloudfoundry/uaa/commit/83c8627c2da7845043b65e6ba354a64b4f9c6e2f url
- https://github.com/cloudfoundry/uaa/commit/8a599448781acd481aa9dab1b0bde3424e00ced url
- https://github.com/cloudfoundry/uaa/commit/d17b23fc3bf9b86f111774925afadfced75315c url
- https://github.com/cloudfoundry/uaa/commit/f6362a8f1865314aa507fc5de772848b7e55236 url
- https://github.com/cloudfoundry/uaa package
- https://www.cloudfoundry.org/blog/cve-2018-11041 url