{"metadata": {"vulnerability": "CVE-2018-17954", "count": 41, "kinds": {"milestone": 9, "sighting": 1, "kev": 0, "other": 31}}, "data": [{"timestamp": "2018-10-03T00:00:00Z", "date_only": false, "value": "2018-10-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2018-17954", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2020-03-11T11:30:47Z", "date_only": false, "value": "2020-03-11T11:30:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2020:0640-1", "record": "SUSE-SU-2020:0640-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2020-03-11T11:30:47Z", "date_only": false, "value": "2020-03-11T11:30:47Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2020:0640-1", "record": "SUSE-SU-2020:0640-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2020-03-11T11:30:47Z", "date_only": false, "value": "2020-03-11T11:30:47Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2020:0640-1", "record": "SUSE-SU-2020:0640-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2020-03-11T11:30:47Z", "date_only": false, "value": "2020-03-11T11:30:47Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:0640-1", "record": "SUSE-SU-2020:0640-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-03-11T11:30:47Z", "date_only": false, "value": "2020-03-11T11:30:47Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2020:0640-1", "record": "SUSE-SU-2020:0640-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2020-03-11T11:33:59Z", "date_only": false, "value": "2020-03-11T11:33:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2020:0642-1", "record": "SUSE-SU-2020:0642-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2020-03-11T11:33:59Z", "date_only": false, "value": "2020-03-11T11:33:59Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2020:0642-1", "record": "SUSE-SU-2020:0642-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2020-03-11T11:33:59Z", "date_only": false, "value": "2020-03-11T11:33:59Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2020:0642-1", "record": "SUSE-SU-2020:0642-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2020-03-11T11:33:59Z", "date_only": false, "value": "2020-03-11T11:33:59Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:0642-1", "record": "SUSE-SU-2020:0642-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-03-11T11:33:59Z", "date_only": false, "value": "2020-03-11T11:33:59Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2020:0642-1", "record": "SUSE-SU-2020:0642-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2020-04-03T00:00:00Z", "date_only": false, "value": "2020-04-03T00:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2018-17954", "record": "GSD-2018-17954", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2020-04-03T00:00:00Z", "date_only": false, "value": "2020-04-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microfocus", "record": "CVE-2018-17954", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-04-03T07:05:13.265Z", "date_only": false, "value": "2020-04-03T07:05:13.265Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2018-17954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-04-03T07:15:00Z", "date_only": false, "value": "2020-04-03T07:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M786-W84G-PCV9", "record": "GHSA-M786-W84G-PCV9", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2020-04-03T07:15:00Z", "date_only": false, "value": "2020-04-03T07:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-17954", "record": "GSD-2018-17954", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2020-04-03T07:15:11.400Z", "date_only": false, "value": "2020-04-03T07:15:11.400", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-17954", "record": "FKIE_CVE-2018-17954", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-04-03T13:58:26Z", "date_only": false, "value": "2020-04-03T13:58:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/10980", "record": "CVE-2018-17954", "field": "creation_timestamp", "uuid": "751ed34e-9fa7-401a-a6ac-05234c1f8da5", "content": "ATENTION\u203c New - CVE-2018-17954\n\nA Least Privilege Violation vulnerability in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/10980"}, {"timestamp": "2020-10-07T11:40:24Z", "date_only": false, "value": "2020-10-07T11:40:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2020:2876-1", "record": "SUSE-SU-2020:2876-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2020-10-07T11:40:24Z", "date_only": false, "value": "2020-10-07T11:40:24Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2020:2876-1", "record": "SUSE-SU-2020:2876-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2020-10-07T11:40:24Z", "date_only": false, "value": "2020-10-07T11:40:24Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2020:2876-1", "record": "SUSE-SU-2020:2876-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2020-10-07T11:40:24Z", "date_only": false, "value": "2020-10-07T11:40:24Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:2876-1", "record": "SUSE-SU-2020:2876-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-10-07T11:40:24Z", "date_only": false, "value": "2020-10-07T11:40:24Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2020:2876-1", "record": "SUSE-SU-2020:2876-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2020-10-13T14:46:03Z", "date_only": false, "value": "2020-10-13T14:46:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2020:2911-1", "record": "SUSE-SU-2020:2911-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2020-10-13T14:46:03Z", "date_only": false, "value": "2020-10-13T14:46:03Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2020:2911-1", "record": "SUSE-SU-2020:2911-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2020-10-13T14:46:03Z", "date_only": false, "value": "2020-10-13T14:46:03Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2020:2911-1", "record": "SUSE-SU-2020:2911-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2020-10-13T14:46:03Z", "date_only": false, "value": "2020-10-13T14:46:03Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:2911-1", "record": "SUSE-SU-2020:2911-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-10-13T14:46:03Z", "date_only": false, "value": "2020-10-13T14:46:03Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2020:2911-1", "record": "SUSE-SU-2020:2911-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2022-05-24T17:13:20Z", "date_only": false, "value": "2022-05-24T17:13:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M786-W84G-PCV9", "record": "GHSA-M786-W84G-PCV9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microfocus", "record": "CVE-2018-17954", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-10-13T12:15:00Z", "date_only": false, "value": "2022-10-13T12:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-17954", "record": "GSD-2018-17954", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-10-13T19:00:23Z", "date_only": false, "value": "2022-10-13T19:00:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M786-W84G-PCV9", "record": "GHSA-M786-W84G-PCV9", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:22:30.994Z", "date_only": false, "value": "2023-12-13T01:22:30.994777Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-17954", "record": "GSD-2018-17954", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-05T11:01:14.743Z", "date_only": false, "value": "2024-08-05T11:01:14.743Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2018-17954", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T20:02:21.821Z", "date_only": false, "value": "2024-09-16T20:02:21.821Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2018-17954", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T01:46:35.620Z", "date_only": false, "value": "2026-06-17T01:46:35.620", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-17954", "record": "FKIE_CVE-2018-17954", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-06T02:08:49.876Z", "anchors": {"origin": {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 213180617.876642, "hours": 59216.83829906722, "days": 2467.3682624611342, "min_seconds": 213180617.876642, "max_seconds": 213180617.876642, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-02-03T17:18:32Z", "date_only": false, "value": "2020-02-03T17:18:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2020:0311-1", "record": "SUSE-SU-2020:0311-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-06T02:08:49.876Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}