CVE-2018-8088 - CVE House
Back to Database
Status published Critical CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2...

Vulnerability Description

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8088

Credits & Attribution

No credits recorded in the NVD database.

References

More from qos

View All →
CVE-2017-5929
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the...
Critical 9.8

Affected Vendor

Affected Software

slf4j, jboss enterprise application platform, virtualization, virtualization host, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux workstation, goldengate application adapters, goldengate stream analytics, utilities framework
Vulnerable Versions:
0, 1.8.0, 7.1, 6.0.0, 6.4.0, 4.0, 7.0, 7.4, 7.5, 7.6, 7.7, 12.3.2.1.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.2.0, 4.3.0.3.0, 4.3.0.4.0, 4.3.0.5.0, 4.3.0.6.0, 4.4.0.0.0

Timeline

Official Publish: March 20th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.