Linux Distros Unpatched Vulnerability : CVE-2018-1000211
Discription

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access tokens are not revoked for public OAuth apps, leaking access until expiry. (CVE-2018-1000211) Note that Nessus relies on the presence of the package as reported by the vendor. File data…Read More
References
Back to Main