CVE-2018-1227
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-1227
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Pivotal Concourse after 2018-03-05 might allow remote attackers to have an unspecified impact, if a customer obtained the Concourse software from a DNS domain that is no longer controlled by Pivotal. The original domain for the Concourse CI (concourse-dot-ci) open source project has been registered by an unknown actor, and is therefore no longer the official website for Concourse CI. The new official domain is concourse-ci.org. At approximately 4 am EDT on March 7, 2018 the Concourse OSS team began receiving reports that the Concourse domain was not responding. The Concourse OSS team discovered, upon investigation with both the original and the new domain registrars, that the originating domain registrar had made the domain available for purchase. This was done despite the domain being renewed by the Concourse OSS team through August 2018. For a customer to be affected, they would have needed to access a download from a "concourse-dot-ci" domain web site after March 6, 2018 18:00:00 EST. Accessing that domain is NOT recommended by Pivotal. Anyone who had been using that domain should immediately begin using the concourse-ci.org domain instead. Customers can also safely access Concourse software from the traditionally available locations on the Pivotal Network or GitHub.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Pivotal Concourse 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pivotal Concourse是美国Pivotal Software公司一套用于持续开发的软件交付控制系统。 Pivotal Concourse 2018-03-05之后的版本中存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Concourse CI: As of 2018-03-13, Pivotal does not believe that any resources or builds of Concourse have been compromised. | Concourse CI: As of 2018-03-13, Pivotal does not believe that any resources or builds of Concourse have been compromised. | - |
II. Public POCs for CVE-2018-1227
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-1227
Please Login to view more intelligence information
- https://pivotal.io/security/cve-2018-1227x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-1227
Same Patch Batch · n/a · 2018-03-13 · 54 CVEs total
| CVE-2018-1000086 | NPR Visuals Team Pym.js 跨站请求伪造漏洞 | |
| CVE-2018-1000126 | Ajenti 信息泄露漏洞 | |
| CVE-2017-16251 | Mitel ST conferencing组件安全漏洞 | |
| CVE-2018-1000124 | I Librarian I-librarian 安全漏洞 | |
| CVE-2018-1000123 | Ionic Team Cordova plugin iOS Keychain 信息泄露漏洞 | |
| CVE-2018-7405 | Zoho ManageEngine EventLog Analyzer 跨站脚本漏洞 | |
| CVE-2018-1000125 | inversoft prime-jwt 输入验证错误漏洞 | |
| CVE-2018-1000089 | Anymail django-anymail 安全漏洞 | |
| CVE-2018-1000088 | Doorkeeper 跨站脚本漏洞 | |
| CVE-2018-1000087 | WolfCMS 跨站脚本漏洞 | |
| CVE-2018-1000090 | textpattern 安全漏洞 | |
| CVE-2018-1000085 | ClamAV XAR解析器安全漏洞 | |
| CVE-2018-1000084 | WolfCMS 跨站脚本漏洞 | |
| CVE-2018-1000083 | Ajenti 安全漏洞 | |
| CVE-2018-1000082 | Ajenti 跨站请求伪造漏洞 | |
| CVE-2018-1000081 | Ajenti 输入验证漏洞 | |
| CVE-2018-1000080 | Ajenti 安全漏洞 | |
| CVE-2018-1000079 | RubyGems 路径遍历漏洞 | |
| CVE-2018-1000078 | RubyGems 跨站脚本漏洞 | |
| CVE-2018-1000077 | RubyGems 输入验证错误漏洞 |
Showing top 20 of 54 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo - CVE-2026-8252
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer - CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo
V. Comments for CVE-2018-1227
No comments yet