Vulnerability in Pivotal Spring Security Oauth
CVE-2018-15758
Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the approval endpoint that can modify the previously saved authorization request and lead to a privilege escalation on the subsequent approval. This scenario can happen if the application is configured to use a custom approval endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and use a custom Approval Endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability does not expose applications that: Act in the role of an Authorization Server and use the default Approval Endpoint, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.022 (82.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 82.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- Pivotal Spring Security Oauth — versions 2.0, 2.2, 2.1
- Pivotal Software Spring Security Oauth
References
- pivotal.io/security/cve-2018-15758 (Mitigation, Vendor Advisory)
- www.securityfocus.com/bid/105687 (VDB Entry, Third Party Advisory, vdb-entry)
- access.redhat.com/errata/RHSA-2019:2413 (vendor-advisory)
Frequently asked questions
- What is CVE-2018-15758?
- CVE-2018-15758 is a critical-severity vulnerability in Pivotal Spring Security Oauth. CVSS score: 9.6/10. Published 2018-10-18.
- How severe is CVE-2018-15758?
- Critical severity. CVSS v3 base score is 9.6 out of 10.