{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 4.12.2 (4.12.x) or 4.13.4 (4.13.x) or later.","affected":[{"fixed":"4.12.2","introduced":"4.12.0"},{"fixed":"4.13.4","introduced":"4.13.0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2018-1262"],"ecosystem":"Maven","epss":0.01293,"exploited":false,"fixed_versions":["4.12.2","4.13.4"],"ghsa_id":"GHSA-8v97-gv3g-32rf","id":"tcs_01M5N8NFFF0KJQ4SKEXXQC57VP","modified_at":"2024-12-07T05:40:29.561806Z","published_at":"2022-05-13T01:07:03Z","references":["https://osv.dev/vulnerability/GHSA-8v97-gv3g-32rf","https://nvd.nist.gov/vuln/detail/CVE-2018-1262","https://github.com/cloudfoundry/uaa/commit/14c745aa293b8d3ce9cdd6bfbc6c0ef3f269b21","https://github.com/cloudfoundry/uaa/commit/dccd3962f969913996ee88f653fce3b108c0205","https://github.com/cloudfoundry/uaa","https://www.cloudfoundry.org/blog/cve-2018-1262"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-8v97-gv3g-32rf","url":"https://osv.dev/vulnerability/GHSA-8v97-gv3g-32rf"}],"summary":"UAA privilege escalation across identity zones"}