CVE-2018-1320

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 07-01-2019 06:29

Last modified: - 30-03-2022 04:15

Total changes: - 6

Description

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

None

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

vendor=apache AND product=thrift AND versionEndIncluding=0.11.0 AND versionStartIncluding=0.5.0

vendor=Debian AND product=debian_linux AND version=8.0

vendor=f5 AND product=traffix_sdc AND versionEndIncluding=5.1.0 AND versionStartIncluding=5.0.0

vendor=oracle AND product=global_lifecycle_management_opatch AND versionEndExcluding=11.2.0.3.23

vendor=oracle AND product=global_lifecycle_management_opatch AND versionStartIncluding=12.2.0.1.0 AND versionEndExcluding=12.2.0.1.19

vendor=oracle AND product=global_lifecycle_management_opatch AND versionStartIncluding=13.9.4.0.0 AND versionEndExcluding=13.9.4.2.1

vendor=oracle AND product=nosql_database AND versionEndExcluding=19.3.12

Reference

https://lists.apache.org/thread.html/da5234b5e78f1c99190407f791dfe1bf6c58de8d30d15974a9669be3@%3Cuser.thrift.apache.org%3E
106551-Third Party Advisory, VDB Entry
[debian-lts-announce] 20190206 [SECURITY] [DLA 1662-1] libthrift-java security update-Mailing List, Third Party Advisory
[infra-devnull] 20190324 [GitHub] [thrift] luciferous opened pull request #1771: THRIFT-4506: fix use of assert for correctness in Java SASL negotiation-Mailing List, Vendor Advisory
https://support.f5.com/csp/article/K36361684
[storm-user] 20190724 [CVE-2018-1320] Apache Storm vulnerable Thrift version-Mailing List, Vendor Advisory
[storm-dev] 20190724 [CVE-2018-1320] Apache Storm vulnerable Thrift version-Mailing List, Vendor Advisory
[announce] 20190724 [CVE-2018-1320] Apache Storm vulnerable Thrift version-Mailing List, Vendor Advisory
[oss-security] 20190724 [CVE-2018-1320] Apache Storm vulnerable Thrift version-Mailing List, Third Party Advisory
RHSA-2019:2413-Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities-Mailing List, Vendor Advisory
[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities-Mailing List, Vendor Advisory
[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities-Mailing List, Vendor Advisory
[cassandra-commits] 20191113 [jira] [Created] (CASSANDRA-15422) CVE-2018-1320(The libthrift component is vulnerable to Improper Access Control) on Cassendra 3.11.4-Mailing List, Vendor Advisory
[cassandra-commits] 20191113 [jira] [Created] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
[cassandra-commits] 20191119 [jira] [Updated] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
[cassandra-commits] 20191119 [jira] [Assigned] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
N/A-Third Party Advisory
[cassandra-commits] 20200604 [jira] [Created] (CASSANDRA-15856) Security vulnerabilities with dependency jars of Cassandra 3.11.6-Mailing List, Vendor Advisory
[cassandra-commits] 20210323 [jira] [Updated] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
[cassandra-commits] 20210415 [jira] [Updated] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
[cassandra-commits] 20210415 [jira] [Commented] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
[cassandra-commits] 20210415 [jira] [Comment Edited] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory
[cassandra-commits] 20210924 [jira] [Updated] (CASSANDRA-15424) CVE-2018-1320 (The libthrift component is vulnerable to Improper Access Control)-Mailing List, Vendor Advisory

Keywords

CVE-2018-1320

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2018-1320

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures