Archive

7 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /7 June 2018 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2018-1256

Issuer validation regression in Spring Cloud SSO Connector

Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound reso…

Pivotal Spring Cloud SSO Connector io.pivotal.spring.cloud:spring-cloud-sso-connector Maven

May 7, 2018