CVE-2018-1253 (GCVE-0-2018-1253)

Vulnerability from cvelistv5 – Published: 2018-06-21 15:00 – Updated: 2024-09-17 03:52
VLAI?
Summary
RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Severity ?
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CWE
  • xss vulnerability
Assigner
References
http://www.securityfocus.com/bid/104534 vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1041134 vdb-entryx_refsource_SECTRACK
http://seclists.org/fulldisclosure/2018/Jun/39 mailing-listx_refsource_FULLDISC
Impacted products
Vendor Product Version
RSA Authentication Manager Affected: unspecified , < 8.3 P1 (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:49.056Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104534",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104534"
          },
          {
            "name": "1041134",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041134"
          },
          {
            "name": "20180612 DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2018/Jun/39"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Authentication Manager",
          "vendor": "RSA",
          "versions": [
            {
              "lessThan": "8.3 P1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "xss vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-26T09:57:02",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "name": "104534",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104534"
        },
        {
          "name": "1041134",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041134"
        },
        {
          "name": "20180612 DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2018/Jun/39"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Stored cross-site scripting vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security_alert@emc.com",
          "DATE_PUBLIC": "2018-06-12T05:00:00.000Z",
          "ID": "CVE-2018-1253",
          "STATE": "PUBLIC",
          "TITLE": "Stored cross-site scripting vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Authentication Manager",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "8.3 P1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "RSA"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "xss vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104534",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104534"
            },
            {
              "name": "1041134",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041134"
            },
            {
              "name": "20180612 DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2018/Jun/39"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2018-1253",
    "datePublished": "2018-06-21T15:00:00Z",
    "dateReserved": "2017-12-06T00:00:00",
    "dateUpdated": "2024-09-17T03:52:50.534Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"7.0\", \"matchCriteriaId\": \"F38C843F-4D75-4DC4-BCE2-AC94EA2AADFA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:7.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"8DB84FE8-27E3-4B6A-9F7B-B3852FD973B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"CFEA20F9-BFEA-4599-91B8-51F2C62257B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"276F775A-7622-46C1-AFAB-BAD4ADB4F551\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"28238983-F94B-4EC7-AE15-4E6B6110DC19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.0:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D880442-0B4A-4D54-9E98-6091B59BC9F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.0:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"008D1316-B493-42D2-8A28-FDB935B4DCE3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"D5CEBCC8-C970-420B-9C32-2CD233461486\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.1:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"AC7D1E9E-3BAE-4FD2-B69F-0013065F0744\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E662A19-3595-4E54-B6FA-C387E1B5FBA6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A3C063C-76E1-443A-8BAE-FFC9C66DE925\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.3:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"29A8B165-32AE-42CC-BE85-CEEF25C8F27A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:emc:rsa_authentication_manager:8.3:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C55F4F6D-FFE4-4D14-9481-DC8D52B6EDFE\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.\"}, {\"lang\": \"es\", \"value\": \"RSA Authentication Manager Operation Console, en versiones 8.3 P1 y anteriores, contiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente. Un administrador de Operations Console podr\\u00eda explotar esta vulnerabilidad para almacenar c\\u00f3digo HTML o JavaScript arbitrario mediante la interfaz web. Cuando otros administradores Operations Console abren la p\\u00e1gina afectada, los scripts inyectados pueden ejecutarse en sus navegadores.\"}]",
      "id": "CVE-2018-1253",
      "lastModified": "2024-11-21T03:59:28.303",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 2.7}], \"cvssMetricV30\": [{\"source\": \"security_alert@emc.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 3.7}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2018-06-21T15:29:00.270",
      "references": "[{\"url\": \"http://seclists.org/fulldisclosure/2018/Jun/39\", \"source\": \"security_alert@emc.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/104534\", \"source\": \"security_alert@emc.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1041134\", \"source\": \"security_alert@emc.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2018/Jun/39\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/104534\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1041134\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}]",
      "sourceIdentifier": "security_alert@emc.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-1253\",\"sourceIdentifier\":\"security_alert@emc.com\",\"published\":\"2018-06-21T15:29:00.270\",\"lastModified\":\"2024-11-21T03:59:28.303\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.\"},{\"lang\":\"es\",\"value\":\"RSA Authentication Manager Operation Console, en versiones 8.3 P1 y anteriores, contiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente. Un administrador de Operations Console podr\u00eda explotar esta vulnerabilidad para almacenar c\u00f3digo HTML o JavaScript arbitrario mediante la interfaz web. Cuando otros administradores Operations Console abren la p\u00e1gina afectada, los scripts inyectados pueden ejecutarse en sus navegadores.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}],\"cvssMetricV30\":[{\"source\":\"security_alert@emc.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.3,\"impactScore\":3.7}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"7.0\",\"matchCriteriaId\":\"F38C843F-4D75-4DC4-BCE2-AC94EA2AADFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:7.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DB84FE8-27E3-4B6A-9F7B-B3852FD973B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFEA20F9-BFEA-4599-91B8-51F2C62257B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"276F775A-7622-46C1-AFAB-BAD4ADB4F551\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:7.1:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"28238983-F94B-4EC7-AE15-4E6B6110DC19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D880442-0B4A-4D54-9E98-6091B59BC9F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.0:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"008D1316-B493-42D2-8A28-FDB935B4DCE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5CEBCC8-C970-420B-9C32-2CD233461486\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.1:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC7D1E9E-3BAE-4FD2-B69F-0013065F0744\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E662A19-3595-4E54-B6FA-C387E1B5FBA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.2:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A3C063C-76E1-443A-8BAE-FFC9C66DE925\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"29A8B165-32AE-42CC-BE85-CEEF25C8F27A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emc:rsa_authentication_manager:8.3:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C55F4F6D-FFE4-4D14-9481-DC8D52B6EDFE\"}]}]}],\"references\":[{\"url\":\"http://seclists.org/fulldisclosure/2018/Jun/39\",\"source\":\"security_alert@emc.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/104534\",\"source\":\"security_alert@emc.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041134\",\"source\":\"security_alert@emc.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2018/Jun/39\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/104534\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1041134\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.