CVE-2018-11786
First published: Tue Sep 18 2018(Updated: )
In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a bit by using chroot to change the root directory to protect files outside of the Karaf install directory; it can be further locked down by defining a security manager policy that limits file system access to those directories beneath the Karaf home that are necessary for the system to run. However, this still allows anyone with ssh access to the Karaf process to read and write a large number of files as the Karaf process user.
Credit: security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache Karaf | <4.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://karaf.apache.org/security/cve-2018-11786.txt
- https://issues.apache.org/jira/browse/KARAF-5427
- https://lists.apache.org/thread.html/5b7ac762c6bbe77ac5d9389f093fc6dbf196c36d788e3d7629e6c1d9@%3Cdev.karaf.apache.org%3E
- https://lists.apache.org/thread.html/5b7ac762c6bbe77ac5d9389f093fc6dbf196c36d788e3d7629e6c1d9%40%3Cdev.karaf.apache.org%3E
Frequently Asked Questions
What is CVE-2018-11786?
CVE-2018-11786 is a vulnerability in Apache Karaf prior to the 4.2.0 release that allows users with access to the Karaf console to read/write any file on the file system.
What is the severity of CVE-2018-11786?
CVE-2018-11786 has a severity rating of 8.8, which is considered critical.
How does CVE-2018-11786 affect Apache Karaf?
CVE-2018-11786 affects Apache Karaf versions up to and excluding 4.2.0.
How can an attacker exploit CVE-2018-11786?
An attacker with access to the Karaf console can exploit CVE-2018-11786 to read/write any file on the file system.
Is there a fix available for CVE-2018-11786?
Yes, the fix for CVE-2018-11786 is included in the Apache Karaf 4.2.0 release.
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/tags
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/type
- collector/mitre-cve
- source/MITRE
- vendor/apache
- canonical/apache karaf