org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Oracle
Subscribe
|
|
|
Qos
Subscribe
|
Slf4j
Subscribe
|
|
Redhat
Subscribe
|
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Aus
Subscribe
Enterprise Linux Server Tus
Subscribe
Enterprise Linux Workstation
Subscribe
Jboss Bpms
Subscribe
Jboss Data Grid
Subscribe
Jboss Data Virtualization
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Application Platform Cd
Subscribe
Jboss Enterprise Brms Platform
Subscribe
Jboss Fuse
Subscribe
Jboss Operations Network
Subscribe
Jboss Single Sign On
Subscribe
Rhel Software Collections
Subscribe
Virtualization
Subscribe
Virtualization Host
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-w77p-8cfg-2x43 | Improper Access Control in SLF4J |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 23 Aug 2024 05:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7 |
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T06:46:12.940Z
Reserved: 2018-03-13T00:00:00
Link: CVE-2018-8088
No data.
Status : Modified
Published: 2018-03-20T16:29:00.547
Modified: 2024-11-21T04:13:14.380
Link: CVE-2018-8088
OpenCVE Enrichment
No data.
Weaknesses
Github GHSA