CVE-2018-8018

{"id": "CVE-2018-8018", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2018-07-20T01:29:04.833", "references": [{"url": "http://www.securityfocus.com/bid/104911", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@apache.org"}, {"url": "https://access.redhat.com/errata/RHSA-2018:3768", "tags": ["Third Party Advisory"], "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread.html/e0fdf53114a321142ecfa5cfa17658090f0b4e1677de431e329b37ab%40%3Cdev.ignite.apache.org%3E", "source": "security@apache.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to GridClientJdkMarshaller deserialization endpoint."}, {"lang": "es", "value": "En Apache Ignite versi\u00f3n anterior a 2.4.8 y versi\u00f3n 2.5. x versi\u00f3n anterior a 2.5.3, el mecanismo de serializaci\u00f3n no tiene una lista de clases permitidas para la serializaci\u00f3n/deserializaci\u00f3n, lo que hace posible ejecutar c\u00f3digo arbitrario cuando las clases vulnerables de un tercero est\u00e1n presentes en Ignite Classpath. La vulnerabilidad se puede se puede explotar si el env\u00eda un formulario especialmente preparado de un objeto serializado hacia el endpoint de conexi\u00f3n de deserializaci\u00f3n GridClientJdkMarshaller."}], "lastModified": "2023-11-07T03:01:21.493", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:ignite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "947F0F40-A9B2-4EF8-8C81-3ABB9F338A50", "versionEndExcluding": "2.4.8"}, {"criteria": "cpe:2.3:a:apache:ignite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B679E033-F70E-4B00-8BEF-43DDD23D380D", "versionEndExcluding": "2.5.3", "versionStartExcluding": "2.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}