{"action":"Upgrade org.apache.karaf:apache-karaf to 3.0.9 (3.0.x), 4.0.9 (4.0.x) or 4.1.1 (4.1.x) or later.","affected":[{"fixed":"3.0.9","introduced":"0"},{"fixed":"4.0.9","introduced":"4.0.0"},{"fixed":"4.1.1","introduced":"4.1.0"}],"component":"org.apache.karaf:apache-karaf","cve_ids":["CVE-2018-11787"],"ecosystem":"Maven","epss":0.02573,"exploited":false,"fixed_versions":["3.0.9","4.0.9","4.1.1"],"ghsa_id":"GHSA-cq9c-55r7-455x","id":"tcs_01M5N8T017EZF48APEYF5DFP1J","modified_at":"2023-11-08T03:59:47.813189Z","published_at":"2019-01-07T19:14:51Z","references":["https://osv.dev/vulnerability/GHSA-cq9c-55r7-455x","https://nvd.nist.gov/vuln/detail/CVE-2018-11787","https://github.com/advisories/GHSA-cq9c-55r7-455x","https://issues.apache.org/jira/browse/KARAF-4993","https://lists.apache.org/thread.html/d9ba4c3104ba32225646879a057b75b54430f349c246c85469037d3c@%3Cdev.karaf.apache.org%3E","http://karaf.apache.org/security/cve-2018-11787.txt"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-cq9c-55r7-455x","url":"https://osv.dev/vulnerability/GHSA-cq9c-55r7-455x"}],"summary":"Improper Authentication in Apache Karaf"}