{"action":"Upgrade org.apache.karaf:apache-karaf to 4.2.0 or later.","affected":[{"fixed":"4.2.0","introduced":"0"}],"component":"org.apache.karaf:apache-karaf","cve_ids":["CVE-2018-11786"],"ecosystem":"Maven","epss":0.01904,"exploited":false,"fixed_versions":["4.2.0"],"ghsa_id":"GHSA-9448-c9wq-jg9v","id":"tcs_01M5N8P2MY48CNTCQ8AC6AHWBY","modified_at":"2023-11-08T03:59:47.752418Z","published_at":"2018-12-21T17:49:33Z","references":["https://osv.dev/vulnerability/GHSA-9448-c9wq-jg9v","https://nvd.nist.gov/vuln/detail/CVE-2018-11786","https://github.com/advisories/GHSA-9448-c9wq-jg9v","https://issues.apache.org/jira/browse/KARAF-5427","https://lists.apache.org/thread.html/5b7ac762c6bbe77ac5d9389f093fc6dbf196c36d788e3d7629e6c1d9@%3Cdev.karaf.apache.org%3E","http://karaf.apache.org/security/cve-2018-11786.txt"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9448-c9wq-jg9v","url":"https://osv.dev/vulnerability/GHSA-9448-c9wq-jg9v"}],"summary":"Improper Privilege Management in Apache Karaf"}