{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 4.5.5 (4.5.x), 4.7.4 (4.7.x) or 4.8.3 (4.8.x) or later.","affected":[{"fixed":"4.5.5","introduced":"0"},{"fixed":"4.7.4","introduced":"4.6.0"},{"fixed":"4.8.3","introduced":"4.8.0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2018-1192"],"ecosystem":"Maven","epss":0.01015,"exploited":false,"fixed_versions":["4.5.5","4.7.4","4.8.3"],"ghsa_id":"GHSA-xg5v-696h-c3vr","id":"tcs_01M5N9J8WS7KH30FEMJ783YARB","modified_at":"2024-03-01T23:56:40.705256Z","published_at":"2022-05-14T03:41:29Z","references":["https://osv.dev/vulnerability/GHSA-xg5v-696h-c3vr","https://nvd.nist.gov/vuln/detail/CVE-2018-1192","https://github.com/cloudfoundry/uaa/commit/1f529fcb43fd200cab10587e889343ef1683c6e6","https://github.com/cloudfoundry/uaa/commit/599391fe5d564c7e4860b8a6ec17cda872a822a3","https://github.com/cloudfoundry/uaa/commit/a61bfabbad22f646ecf1f00016b448b26a60daf","https://github.com/cloudfoundry/uaa","https://www.cloudfoundry.org/blog/cve-2018-1192"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-xg5v-696h-c3vr","url":"https://osv.dev/vulnerability/GHSA-xg5v-696h-c3vr"}],"summary":"Cloud Foundry UAA SessionID present in Audit Event Logs"}