Vulnerability-Lookup

CVE-2018-18593 (GCVE-0-2018-18593)

Vulnerability from cvelistv5 – Published: 2018-12-31 15:00 – Updated: 2024-09-16 18:09

Title

MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities

Summary

Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information

Severity

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE

Remote Directory Traversal and Remote Disclosure of Privileged Information

Assigner

microfocus

References

2 references

URL	Tags
http://www.securityfocus.com/bid/106374	vdb-entryx_refsource_BID
https://softwaresupport.softwaregrp.com/doc/KM03309650	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Micro Focus	UCMDB Configuration Management Service	Affected: 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11

Date Public

2018-12-31 00:00

Credits

Micro Focus would like to thank Bahadir Pektas and Emre Ilbeyoglu for reporting this issue to security@microfocus.com.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:15:59.681Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "106374",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106374"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "UCMDB Configuration Management Service",
          "vendor": "Micro Focus",
          "versions": [
            {
              "status": "affected",
              "version": "10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Micro Focus would like to thank Bahadir Pektas and Emre Ilbeyoglu for reporting this issue to security@microfocus.com."
        }
      ],
      "datePublic": "2018-12-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information"
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Directory Traversal and Remote Disclosure of Privileged Information",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:16:02.000Z",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "name": "106374",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106374"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "DATE_PUBLIC": "2018-12-31T13:16:00.000Z",
          "ID": "CVE-2018-18593",
          "STATE": "PUBLIC",
          "TITLE": "MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "UCMDB Configuration Management Service",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micro Focus"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Micro Focus would like to thank Bahadir Pektas and Emre Ilbeyoglu for reporting this issue to security@microfocus.com."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information"
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information"
          }
        ],
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "106374",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106374"
            },
            {
              "name": "https://softwaresupport.softwaregrp.com/doc/KM03309650",
              "refsource": "MISC",
              "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2018-18593",
    "datePublished": "2018-12-31T15:00:00.000Z",
    "dateReserved": "2018-10-23T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:09:18.629Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2018-18593",
      "date": "2026-07-18",
      "epss": "0.06592",
      "percentile": "0.93083"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-18593\",\"sourceIdentifier\":\"security@opentext.com\",\"published\":\"2018-12-31T15:29:00.287\",\"lastModified\":\"2024-11-21T03:56:13.250\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information\"},{\"lang\":\"es\",\"value\":\"Saltos de directorio remotos y la divulgaci\u00f3n de informaci\u00f3n privilegiada remota en UCMDB Configuration Management Service en sus versiones 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08 y 2018.11. Las vulnerabilidades podr\u00edan permitir saltos de directorio y la divulgaci\u00f3n de informaci\u00f3n privilegiada remota.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"security@opentext.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00348879-766F-4CBA-9761-AE4E258CA7EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup1:*:*:*:*:*:*\",\"matchCriteriaId\":\"346A18A2-540C-4F17-BF34-1E5EEEC07D14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup2:*:*:*:*:*:*\",\"matchCriteriaId\":\"83128A67-03F8-4B35-8F06-7F2E4B249E80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup3:*:*:*:*:*:*\",\"matchCriteriaId\":\"D845A099-B07F-418B-AF1A-31CB55177D10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup4:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDEA9704-D957-430B-A385-DABE05105D7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup5:*:*:*:*:*:*\",\"matchCriteriaId\":\"299EB23B-E31C-4F60-94DD-42601C5712C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup6:*:*:*:*:*:*\",\"matchCriteriaId\":\"850CDC6A-1F0F-4C8B-9EAA-8B761E1B125C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup7:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5F13FCA-3A25-4723-86B4-5FE45891C284\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F603D53-4D81-436F-BFC7-70702780B9C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB8CB58E-0A63-4A3C-8159-35CA933E03E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup2:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5AB8C9C-E85E-4EFB-B6A1-811154FC152F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup3:*:*:*:*:*:*\",\"matchCriteriaId\":\"D94222DA-E445-444E-BCAE-248EBAA43478\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:2018.02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB4457B8-AC0A-4156-BCCF-193D51FF0823\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:2018.05:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D61129A2-97E1-4F37-B0C7-0A623FF1EF98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:2018.08:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09094DD7-FC42-4CD0-82D0-64225257363C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:ucmdb_configuration_manager:2018.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0514279C-C46F-4ED5-9058-490E3FEE1B1F\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/106374\",\"source\":\"security@opentext.com\"},{\"url\":\"https://softwaresupport.softwaregrp.com/doc/KM03309650\",\"source\":\"security@opentext.com\"},{\"url\":\"http://www.securityfocus.com/bid/106374\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://softwaresupport.softwaregrp.com/doc/KM03309650\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}

CNVD-2019-24779

Vulnerability from cnvd - Published: 2019-07-25

Title

HPE UCMDB Configuration Management Service目录遍历漏洞

Description

HPE UCMDB（全称Universal CMDB）是一套资源管理解决方案。该方案提供自底向上包括IT基础架构的自动发现、数据模型建立、服务映射定义和服务影响分析等功能。Configuration Manager Service是其中的一个配置管理器。 HPE UCMDB Configuration Management Service中存在目录遍历漏洞。攻击者可利用该漏洞遍历目录和获取信息。

Severity

中

Patch Name

HPE UCMDB Configuration Management Service目录遍历漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://softwaresupport.softwaregrp.com/doc/KM03309650

Reference

https://softwaresupport.softwaregrp.com/doc/KM03309650

Impacted products

Name
HP UCMDB

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-18593",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18593"
    }
  },
  "description": "HPE UCMDB\uff08\u5168\u79f0Universal CMDB\uff09\u662f\u4e00\u5957\u8d44\u6e90\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u63d0\u4f9b\u81ea\u5e95\u5411\u4e0a\u5305\u62ecIT\u57fa\u7840\u67b6\u6784\u7684\u81ea\u52a8\u53d1\u73b0\u3001\u6570\u636e\u6a21\u578b\u5efa\u7acb\u3001\u670d\u52a1\u6620\u5c04\u5b9a\u4e49\u548c\u670d\u52a1\u5f71\u54cd\u5206\u6790\u7b49\u529f\u80fd\u3002Configuration Manager Service\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u914d\u7f6e\u7ba1\u7406\u5668\u3002\n\nHPE UCMDB Configuration Management Service\u4e2d\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u904d\u5386\u76ee\u5f55\u548c\u83b7\u53d6\u4fe1\u606f\u3002",
  "discovererName": "Bahadir Pektas and Emre Ilbeyoglu",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1ahttps://softwaresupport.softwaregrp.com/doc/KM03309650",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-24779",
  "openTime": "2019-07-25",
  "patchDescription": "HPE UCMDB\uff08\u5168\u79f0Universal CMDB\uff09\u662f\u4e00\u5957\u8d44\u6e90\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u63d0\u4f9b\u81ea\u5e95\u5411\u4e0a\u5305\u62ecIT\u57fa\u7840\u67b6\u6784\u7684\u81ea\u52a8\u53d1\u73b0\u3001\u6570\u636e\u6a21\u578b\u5efa\u7acb\u3001\u670d\u52a1\u6620\u5c04\u5b9a\u4e49\u548c\u670d\u52a1\u5f71\u54cd\u5206\u6790\u7b49\u529f\u80fd\u3002Configuration Manager Service\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u914d\u7f6e\u7ba1\u7406\u5668\u3002\r\n\r\nHPE UCMDB Configuration Management Service\u4e2d\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u904d\u5386\u76ee\u5f55\u548c\u83b7\u53d6\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "HPE UCMDB Configuration Management Service\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "HP UCMDB"
  },
  "referenceLink": "https://softwaresupport.softwaregrp.com/doc/KM03309650",
  "serverity": "\u4e2d",
  "submitTime": "2019-01-03",
  "title": "HPE UCMDB Configuration Management Service\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e"
}

FKIE_CVE-2018-18593

Vulnerability from fkie_nvd - Published: 2018-12-31 15:29 - Updated: 2026-06-17 01:47

Severity

6.5 (Medium) - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	security@opentext.com	http://www.securityfocus.com/bid/106374
	security@opentext.com	https://softwaresupport.softwaregrp.com/doc/KM03309650
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/106374
	af854a3a-2127-422b-91ae-364da2661108	https://softwaresupport.softwaregrp.com/doc/KM03309650

Impacted products

Vendor	Product	Version
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.22
hp	ucmdb_configuration_manager	10.33
hp	ucmdb_configuration_manager	10.33
hp	ucmdb_configuration_manager	10.33
hp	ucmdb_configuration_manager	10.33
hp	ucmdb_configuration_manager	2018.02
hp	ucmdb_configuration_manager	2018.05
hp	ucmdb_configuration_manager	2018.08
hp	ucmdb_configuration_manager	2018.11

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "UCMDB Configuration Management Service",
          "vendor": "Micro Focus",
          "versions": [
            {
              "status": "affected",
              "version": "10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11"
            }
          ]
        }
      ],
      "source": "security@opentext.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "00348879-766F-4CBA-9761-AE4E258CA7EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup1:*:*:*:*:*:*",
              "matchCriteriaId": "346A18A2-540C-4F17-BF34-1E5EEEC07D14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup2:*:*:*:*:*:*",
              "matchCriteriaId": "83128A67-03F8-4B35-8F06-7F2E4B249E80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup3:*:*:*:*:*:*",
              "matchCriteriaId": "D845A099-B07F-418B-AF1A-31CB55177D10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup4:*:*:*:*:*:*",
              "matchCriteriaId": "FDEA9704-D957-430B-A385-DABE05105D7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup5:*:*:*:*:*:*",
              "matchCriteriaId": "299EB23B-E31C-4F60-94DD-42601C5712C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup6:*:*:*:*:*:*",
              "matchCriteriaId": "850CDC6A-1F0F-4C8B-9EAA-8B761E1B125C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup7:*:*:*:*:*:*",
              "matchCriteriaId": "A5F13FCA-3A25-4723-86B4-5FE45891C284",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F603D53-4D81-436F-BFC7-70702780B9C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup1:*:*:*:*:*:*",
              "matchCriteriaId": "CB8CB58E-0A63-4A3C-8159-35CA933E03E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup2:*:*:*:*:*:*",
              "matchCriteriaId": "A5AB8C9C-E85E-4EFB-B6A1-811154FC152F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup3:*:*:*:*:*:*",
              "matchCriteriaId": "D94222DA-E445-444E-BCAE-248EBAA43478",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.02:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB4457B8-AC0A-4156-BCCF-193D51FF0823",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.05:*:*:*:*:*:*:*",
              "matchCriteriaId": "D61129A2-97E1-4F37-B0C7-0A623FF1EF98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.08:*:*:*:*:*:*:*",
              "matchCriteriaId": "09094DD7-FC42-4CD0-82D0-64225257363C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "0514279C-C46F-4ED5-9058-490E3FEE1B1F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information"
    },
    {
      "lang": "es",
      "value": "Saltos de directorio remotos y la divulgaci\u00f3n de informaci\u00f3n privilegiada remota en UCMDB Configuration Management Service en sus versiones 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08 y 2018.11. Las vulnerabilidades podr\u00edan permitir saltos de directorio y la divulgaci\u00f3n de informaci\u00f3n privilegiada remota."
    }
  ],
  "id": "CVE-2018-18593",
  "lastModified": "2026-06-17T01:47:33.763",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.2,
        "source": "security@opentext.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-12-31T15:29:00.287",
  "references": [
    {
      "source": "security@opentext.com",
      "url": "http://www.securityfocus.com/bid/106374"
    },
    {
      "source": "security@opentext.com",
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/106374"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
    }
  ],
  "sourceIdentifier": "security@opentext.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-V7CJ-G3GX-P5GF

Vulnerability from github – Published: 2022-05-13 01:33 – Updated: 2022-05-13 01:33

Details

Severity

7.5 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2018-18593"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-12-31T15:29:00Z",
    "severity": "HIGH"
  },
  "details": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information",
  "id": "GHSA-v7cj-g3gx-p5gf",
  "modified": "2022-05-13T01:33:42Z",
  "published": "2022-05-13T01:33:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18593"
    },
    {
      "type": "WEB",
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/106374"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2018-18593

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2018-18593

Aliases

CVE-2018-18593

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2018-18593",
    "description": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information",
    "id": "GSD-2018-18593"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-18593"
      ],
      "details": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information",
      "id": "GSD-2018-18593",
      "modified": "2023-12-13T01:22:35.999046Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@microfocus.com",
        "DATE_PUBLIC": "2018-12-31T13:16:00.000Z",
        "ID": "CVE-2018-18593",
        "STATE": "PUBLIC",
        "TITLE": "MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "UCMDB Configuration Management Service",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Micro Focus"
            }
          ]
        }
      },
      "credit": [
        {
          "lang": "eng",
          "value": "Micro Focus would like to thank Bahadir Pektas and Emre Ilbeyoglu for reporting this issue to security@microfocus.com."
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information"
          }
        ]
      },
      "exploit": [
        {
          "lang": "eng",
          "value": " Remote Directory Traversal and Remote Disclosure of Privileged Information"
        }
      ],
      "impact": {
        "cvss": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.0"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": " Remote Directory Traversal and Remote Disclosure of Privileged Information"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "106374",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/106374"
          },
          {
            "name": "https://softwaresupport.softwaregrp.com/doc/KM03309650",
            "refsource": "MISC",
            "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup6:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.02:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.05:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.08:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup7:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@suse.com",
          "ID": "CVE-2018-18593"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://softwaresupport.softwaregrp.com/doc/KM03309650",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://softwaresupport.softwaregrp.com/doc/KM03309650"
            },
            {
              "name": "106374",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/106374"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2019-10-09T23:37Z",
      "publishedDate": "2018-12-31T15:29Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2018-18593 (GCVE-0-2018-18593)

CNVD-2019-24779

FKIE_CVE-2018-18593

GHSA-V7CJ-G3GX-P5GF

GSD-2018-18593

Tags

Sightings

Nomenclature