CVE-2018-1262

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation.

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-126216.1An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.CVE-2018-126226.1An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.CVE-2018-126236.1An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.CVE-2018-126246.1An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.CVE-2018-126256.1An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.CVE-2018-126266.1An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.CVE-2018-126276.1An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameterCVE-2018-126288.8An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.CVE-2018-12634.7Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerabiliCVE-2018-126309.8NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect_id parameter to the /catalog URI.CVE-2018-126317.5Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/text?LFN=../ directory CVE-2018-126325.3Redatam7 (formerly Redatam WebServer) allows remote attackers to discover the installation path via an invalid LFN parameter to the /redbin/
CVE-2018-1262: High severity, CVSS 7.2 | Vulnix