CVE-2018-1195
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2018
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cloud Controller
- Vendor
- Dell EMC
- Product
- Cloud Controller
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| You are using Cloud Controller version prior to 1.46.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| You are using cf-deployment version prior to 1.3.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| You are using cf-release version prior to 283 | affected | Unavailable | Unavailable | Unavailable | None listed |