GitHub Advisoryadvisory · Maven

GHSA-wjxj-f8rg-99wx Improper Input Validation in Apache Thrift

HIGH Published 2019-01-17 Modified 2024-03-04 Official page ↗
Aliases
CVE-2018-1320
Ecosystem
Maven
Packages
org.apache.thrift:libthrift
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20, CWE-295
Reviewed
2020-06-16

Affected packages

• Maven org.apache.thrift:libthrift: >= 0.5.0, < 0.9.3-1 → fixed in 0.9.3-1 • Maven org.apache.thrift:libthrift: >= 0.10.0, < 0.12.0 → fixed in 0.12.0

Description

Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to 0.12.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

Related

Alias · CVE (1)

  • CVE-2018-1320 Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-295 Improper Certificate Validation weakness

References