{"id":"CVE-2018-1256","aliases":["GHSA-q4q2-93pw-qwgf"],"url":"https://o3.security/vulnerability/CVE-2018-1256","summary":"Issuer validation regression in Spring Cloud SSO Connector","details":"Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of the SSO Connector with tokens generated from another service plan.\n\n### Mitigation\nUsers of affected versions should apply the following mitigation:\n* Releases that have fixed this issue include:</p><ul><li>Spring Cloud SSO Connector: 2.1.3</li></ul>\n* Alternatively, you can perform <u>one</u> of the following workarounds:</p><ul><li>Bind your resource server to the SSO service plan via a service instance binding</li><li>Set “sso.connector.cloud.available=true” within your Spring application properties</li></ul>\n\n","published":"2018-05-07T16:22:00.217Z","modified":"2026-10-24T10:30:21.336296947Z","cvss":{"score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"io.pivotal.spring.cloud:spring-cloud-sso-connector","fixedVersion":"2.1.3.RELEASE"}],"fix":{"url":"https://github.com/pivotal-cf/spring-cloud-sso-connector/commit/ef647a2acf2363c6018e8543d665ac8862593372","label":"pivotal-cf/spring-cloud-sso-connector@ef647a2"},"references":[{"type":"ADVISORY","url":"https://pivotal.io/security/cve-2018-1256"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1256"},{"type":"WEB","url":"https://github.com/pivotal-cf/spring-cloud-sso-connector/commit/ef647a2acf2363c6018e8543d665ac8862593372"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-24T10:30:21.336296947Z"}}