CVE-2018-1320

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-07 · updated 2026-06-17
Weakness: CWE-295

Description

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

Affected products

Apache Software Foundation Apache Thrift: from 0.5.0 through 0.11.0
Debian Linux: 8.0
F5 Traffix SDC: from 5.0.0 through 5.1.0
Oracle Global Lifecycle Management Opatch: before 11.2.0.3.23; from 12.2.0.1.0 before 12.2.0.1.19; from 13.9.4.0.0 before 13.9.4.2.1 — fixed in 11.2.0.3.23, 12.2.0.1.19, 13.9.4.2.1
Oracle Nosql Database: before 19.3.12 — fixed in 19.3.12

How to fix

Upgrade to a fixed version: Oracle Global Lifecycle Management Opatch 11.2.0.3.23, 12.2.0.1.19, 13.9.4.2.1; Oracle Nosql Database 19.3.12. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-1320 or the next vulnerability affects your stack