Description
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-w77p-8cfg-2x43 | Improper Access Control in SLF4J |
References
History
Fri, 23 Aug 2024 05:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7 |
Subscriptions
Oracle
Subscribe
Goldengate Application Adapters
Subscribe
Goldengate Stream Analytics
Subscribe
Utilities Framework
Subscribe
Qos
Subscribe
Slf4j
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Aus
Subscribe
Enterprise Linux Server Tus
Subscribe
Enterprise Linux Workstation
Subscribe
Jboss Bpms
Subscribe
Jboss Data Grid
Subscribe
Jboss Data Virtualization
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Application Platform Cd
Subscribe
Jboss Enterprise Brms Platform
Subscribe
Jboss Fuse
Subscribe
Jboss Operations Network
Subscribe
Jboss Single Sign On
Subscribe
Rhel Software Collections
Subscribe
Virtualization
Subscribe
Virtualization Host
Subscribe
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T06:46:12.940Z
Reserved: 2018-03-13T00:00:00.000Z
Link: CVE-2018-8088
No data.
Status : Modified
Published: 2018-03-20T16:29:00.547
Modified: 2024-11-21T04:13:14.380
Link: CVE-2018-8088
OpenCVE Enrichment
No data.
Weaknesses
Github GHSA