CVE-2018-15801: Authorization Bypass During JWT Issuer Validation with spring-security
Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-15801?
CVE-2018-15801 is a vulnerability in Spring Security versions 5.1.x prior to 5.1.2 that allows an authorization bypass during JWT issuer validation.
What is the severity of CVE-2018-15801?
The severity of CVE-2018-15801 is high with a CVSS score of 7.4.
How does CVE-2018-15801 affect VMware Spring Framework?
CVE-2018-15801 affects VMware Spring Framework versions 5.1.x prior to 5.1.2.
What is the possible impact of CVE-2018-15801?
The vulnerability can be exploited by an attacker using the same private key as an honest issuer to generate malicious JWTs and bypass authorization.
How can I fix CVE-2018-15801 in Spring Security?
To fix CVE-2018-15801, upgrade to version 5.1.2 or later of Spring Security.