[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f97MvtwiyOCH83ljT9V7Fg4Q_oi0syhr71d3x9kykrYo":3,"g5a-risk:CVE-2018-0489":165},{"success":4,"data":5,"meta":163},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":62,"references":63,"referencesCount":92,"weaknesses":93,"weaknessesCount":102,"isActivelyExploited":103,"cisaInfo":15,"otxData":15,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":161,"notableEvents":162},"CVE-2018-0489","What is CVE-2018-0489?","Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.","Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of u...","2018-02-27T15:29:00.49","2018-03-23T15:18:53.2",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",3.9,2.5,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,10,4.9,0.02107,[38,38,38,38,38,38,38],"Medium",[42,47,52,55,58],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"shibboleth","xmltooling-c","*","cpe:2.3:a:shibboleth:xmltooling-c:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","7.0","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":45,"criteria":61,"vulnerable":4},"arubanetworks","clearpass","cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",5,[64,69,74,78,83,89],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.arubanetworks.com\u002Fassets\u002Falert\u002FARUBA-PSA-2018-003.txt","Arubanetworks",[68],"Third Party Advisory",{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103172","Securityfocus",[68,73],"VDB Entry",{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040435","Securitytracker",[68,73],{"url":79,"source":80,"tags":81},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F02\u002Fmsg00031.html","Debian",[82],"Issue Tracking",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fshibboleth.net\u002Fcommunity\u002Fadvisories\u002Fsecadv_20180227.txt","Shibboleth",[87,88],"Patch","Vendor Advisory",{"url":90,"source":80,"tags":91},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4126",[68],6,[94],{"id":95,"name":96,"description":97,"extendedDescription":98,"status":99,"abstraction":100,"structure":101},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2018-0489? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-0489, a medium severity cyber security vulnerability from 2018. Shibboleth XMLTooling-C before 1.6.4, as used in Shibbolet...","CVE-2018-0489, CVE-2018-0489 vulnerability, CVE-2018-0489 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, shibboleth security, debian security, arubanetworks security, xmltooling-c vulnerability, debian_linux vulnerability, clearpass vulnerability","\u002Fwhat-is\u002Fcve-2018-0489",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-0489","Cybersecurity","CVE-2018-0489, CVE-2018-0489 vulnerability, CVE-2018-0489 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,139,149],{"Operator":15,"Negate":15,"Nodes":132},[133],{"Operator":134,"Negate":15,"CPEMatch":135},"OR",[136],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":137,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":138,"VersionEndIncluding":15},"FE719FB4-E0D6-4D02-99C1-4F4A3611ECA4","1.6.4",{"Operator":15,"Negate":15,"Nodes":140},[141],{"Operator":134,"Negate":15,"CPEMatch":142},[143,145,147],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16F59A04-14CF-49E2-9973-645477EA09DA",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":150},[151],{"Operator":134,"Negate":15,"CPEMatch":152},[153,157],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":155,"VersionEndExcluding":15,"VersionEndIncluding":156},"86975B54-7B04-4726-9C2B-444C6EFDBE7B","6.6.0","6.6.9",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":159,"VersionEndExcluding":160,"VersionEndIncluding":15},"852C9C3C-3E9C-4A9B-B04E-6C0EBFC7C2DA","6.7.0","6.7.2",[],[],{"lastModified":11,"cacheTime":164,"version":32},1792344683391,{"score":166,"band":167,"action":168,"scoredAt":169},34,"Low","Monitor","2026-10-16T06:43:27.647743+00:00"]