NetSight
IP …
critical9.8

CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted d…

Impact

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

Affected products

VendorProductAffected versions
QosSlf4j
before 1.7.26
Version 1.8.0
RedhatJboss Enterprise Application Platform
Versions 7.1, 6.0.0, 6.4.0
RedhatVirtualization
Version 4.0
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.4, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0
OracleGoldengate Application Adapters
Version 12.3.2.1.0
OracleGoldengate Stream Analytics
before 19.1.0.0.1

References