CVE:CVE-2018-1258
CNNVD:CNNVD-201805-404
Vmware Spring Framework是美国Vmware公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。VMware  Spring Security是美国VMware 公司的一套为基于Spring的应用程序提供说明性安全保护的安全框架。
Pivotal Spring Security和Spring Framework 5.0.6之前版本中存在授权问题漏洞。当两个产品同时使用时，攻击者可利用该漏洞获取被限制方法的访问权限。
solution:Upgrade pivotal_software spring_security to a higher version than *; Upgrade vmware spring_framework to a higher version than 5.0.5,and avoid the version 5.0.5; Upgrade oracle agile_plm to a higher version than 9.3.3,9.3.4,9.3.5,9.3.6,and avoid the version 9.3.3,9.3.4,9.3.5,9.3.6; Upgrade oracle application_testing_suite to a higher version than 10.1,12.5.0.3,13.1.0.1,13.2.0.1,13.3.0.1,and avoid the version 10.1,12.5.0.3,13.1.0.1,13.2.0.1,13.3.0.1; Upgrade oracle big_data_discovery to a higher version than 1.6.0,and avoid the version 1.6.0; Upgrade oracle communications_converged_application_server to a higher version than 7.0.0.1,and avoid the version (,7.0.0.1); Upgrade oracle communications_diameter_signaling_router to a higher version than 8.3,and avoid the version (,8.3); Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version [7.3.2,7.3.6]; Upgrade oracle communications_performance_intelligence_center to a higher version than 10.2.1,and avoid the version (,10.2.1); Upgrade oracle communications_services_gatekeeper to a higher version than 6.1.0.4.0,and avoid the version (,6.1.0.4.0); Upgrade oracle endeca_information_discovery_integrator to a higher version than 3.1.0,3.2.0,and avoid the version 3.1.0,3.2.0; Upgrade oracle enterprise_manager_for_mysql_database to a higher version than 13.2,and avoid the version 13.2; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.2.2,12.3.3,and avoid the version 12.2.2,12.3.3; Upgrade oracle enterprise_repository to a higher version than 11.1.1.7.0,12.1.3.0.0,and avoid the version 11.1.1.7.0,12.1.3.0.0; Upgrade oracle goldengate_for_big_data to a higher version than 12.2.0.1,12.3.1.1,12.3.2.1,and avoid the version 12.2.0.1,12.3.1.1,12.3.2.1; Upgrade oracle health_sciences_information_manager to a higher version than 3.0,and avoid the version 3.0; Upgrade oracle healthcare_master_person_index to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle insurance_calculation_engine to a higher version than 10.1.1,10.2,10.2.1,and avoid the version 10.1.1,10.2,10.2.1; Upgrade oracle insurance_policy_administration to a higher version than 10.0,10.1,10.2,11.0,and avoid the version 10.0,10.1,10.2,11.0; Upgrade oracle insurance_rules_palette to a higher version than 10.0,10.1,10.2,11.0,11.1,and avoid the version 10.0,10.1,10.2,11.0,11.1; Upgrade oracle micros_lucas to a higher version than 2.9.5,and avoid the version 2.9.5; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.2.8191,and avoid the version (,8.0.2.8191]; Upgrade oracle peoplesoft_enterprise_fin_install to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle retail_assortment_planning to a higher version than 14.1,15.0,16.0,and avoid the version 14.1,15.0,16.0; Upgrade oracle retail_back_office to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_central_office to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_customer_insights to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_financial_integration to a higher version than 13.2,14.0,14.1,15.0,16.0,and avoid the version 13.2,14.0,14.1,15.0,16.0; Upgrade oracle retail_integration_bus to a higher version than 14.1.2,and avoid the version 14.1.2; Upgrade oracle retail_point-of-service to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_returns_management to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_xstore_point_of_service to a higher version than 17.0,and avoid the version 17.0; Upgrade oracle service_architecture_leveraging_tuxedo to a higher version than 12.1.3.0.0,12.2.2.0.0,and avoid the version 12.1.3.0.0,12.2.2.0.0; Upgrade oracle tape_library_acsls to a higher version than 8.4,and avoid the version 8.4; Upgrade oracle weblogic_server to a higher version than 10.3.6.0,12.1.3.0,12.2.1.2,12.2.1.3,and avoid the version 10.3.6.0,12.1.3.0,12.2.1.2,12.2.1.3; Upgrade netapp oncommand_insight to a higher version than -; netapp oncommand_unified_manager avoid the version [7.3,),[9.4,),no fixed version after 7.3,no fixed version after 9.4; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade redhat fuse to a higher version than 7.3.0,and avoid the version 7.3.0