CVE-2018-1192

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-01 · updated 2026-06-17
Weakness: CWE-200

Description

In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3, the SessionID is logged in audit event logs. An attacker can use the SessionID to impersonate a logged-in user.

Affected products

Pivotal Software Cloud Foundry Cf-Deployment: before 1.7 — fixed in 1.7
Pivotal Software Cloud Foundry Cf-Release: before 285 — fixed in 285
Cloud Foundry UAA: from 4.5.0 before 4.5.5; from 4.7.0 before 4.7.4; from 4.8.0 before 4.8.3 — fixed in 4.5.5, 4.7.4, 4.8.3
Cloud Foundry UAA Release (OSS): 45.7, 52.7, 53.3

How to fix

Upgrade to a fixed version: Pivotal Software Cloud Foundry Cf-Deployment 1.7; Pivotal Software Cloud Foundry Cf-Release 285; Cloud Foundry UAA 4.5.5, 4.7.4, 4.8.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-1192 or the next vulnerability affects your stack