VAR-201808-0745
Vulnerability from variot - Updated: 2023-12-18 13:33A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality, integrity and availability of the system. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or special conditions of the system, but user interaction is required. Automation License Manager Contains a path traversal vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The Siemens Automation License Manager is a Siemens system from Germany that handles remote and local certificates in HMI, SCADA and industrial products. An attacker can exploit these issues using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201808-0745",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "automation license manager",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "6.0.1"
},
{
"model": "automation license manager",
"scope": "gte",
"trust": 1.0,
"vendor": "siemens",
"version": "6.0"
},
{
"model": "automation license manager",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "5.3.4.4"
},
{
"model": "automation license manager",
"scope": "gt",
"trust": 1.0,
"vendor": "siemens",
"version": "5.0"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.9,
"vendor": "siemens",
"version": "5.2"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.9,
"vendor": "siemens",
"version": "5.1"
},
{
"model": "automation license manager",
"scope": "lt",
"trust": 0.8,
"vendor": "siemens",
"version": "5 (5.3.4.4 )"
},
{
"model": "automation license manager",
"scope": "lt",
"trust": 0.8,
"vendor": "siemens",
"version": "6 (6.0.1 )"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "5.*\u003c5.3.4.4"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "6.*\u003c6.0.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "automation license manager",
"version": "*"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.3,
"vendor": "siemens",
"version": "6.0"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.3,
"vendor": "siemens",
"version": "5.3"
},
{
"model": "automation license manager",
"scope": "ne",
"trust": 0.3,
"vendor": "siemens",
"version": "6.0.1"
},
{
"model": "automation license manager",
"scope": "ne",
"trust": 0.3,
"vendor": "siemens",
"version": "5.3.4.4"
}
],
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:siemens:automation_license_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "5.3.4.4",
"versionStartExcluding": "5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:siemens:automation_license_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "6.0.1",
"versionStartIncluding": "6.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-11455"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Vladimir Dashchenko of Kaspersky Lab.",
"sources": [
{
"db": "BID",
"id": "105114"
}
],
"trust": 0.3
},
"cve": "CVE-2018-11455",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2018-11455",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-18001",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-121316",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2018-11455",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-11455",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2018-18001",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201808-239",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-121316",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "VULHUB",
"id": "VHN-121316"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in Automation License Manager 5 (All versions \u003c 5.3.4.4), Automation License Manager 6 (All versions \u003c 6.0.1). A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality, integrity and availability of the system. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or special conditions of the system, but user interaction is required. Automation License Manager Contains a path traversal vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The Siemens Automation License Manager is a Siemens system from Germany that handles remote and local certificates in HMI, SCADA and industrial products. \nAn attacker can exploit these issues using directory-traversal characters (\u0027../\u0027) to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "VULHUB",
"id": "VHN-121316"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-11455",
"trust": 3.6
},
{
"db": "SIEMENS",
"id": "SSA-920962",
"trust": 2.3
},
{
"db": "BID",
"id": "105114",
"trust": 2.0
},
{
"db": "ICS CERT",
"id": "ICSA-18-226-03",
"trust": 1.1
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2018-18001",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996",
"trust": 0.8
},
{
"db": "IVD",
"id": "E2F8FC70-39AB-11E9-ABA5-000C29342CB1",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-121316",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "VULHUB",
"id": "VHN-121316"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"id": "VAR-201808-0745",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "VULHUB",
"id": "VHN-121316"
}
],
"trust": 1.522807
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
}
]
},
"last_update_date": "2023-12-18T13:33:43.628000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-920962",
"trust": 0.8,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf"
},
{
"title": "Patch for the Siemens Automation License Manager arbitrary code execution vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/138851"
},
{
"title": "Siemens Automation License Manager Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=83958"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-121316"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "NVD",
"id": "CVE-2018-11455"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.3,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/105114"
},
{
"trust": 1.1,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-226-03"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11455"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-11455"
},
{
"trust": 0.3,
"url": "http://www.siemens.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "VULHUB",
"id": "VHN-121316"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"db": "VULHUB",
"id": "VHN-121316"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-09-07T00:00:00",
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"date": "2018-09-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"date": "2018-08-07T00:00:00",
"db": "VULHUB",
"id": "VHN-121316"
},
{
"date": "2018-08-14T00:00:00",
"db": "BID",
"id": "105114"
},
{
"date": "2018-11-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"date": "2018-08-07T15:29:00.497000",
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"date": "2018-08-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-09-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-18001"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-121316"
},
{
"date": "2018-08-14T00:00:00",
"db": "BID",
"id": "105114"
},
{
"date": "2019-01-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008996"
},
{
"date": "2019-10-09T23:33:32.433000",
"db": "NVD",
"id": "CVE-2018-11455"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens Automation License Manager Arbitrary code execution vulnerability",
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-18001"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Path traversal",
"sources": [
{
"db": "IVD",
"id": "e2f8fc70-39ab-11e9-aba5-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-239"
}
],
"trust": 0.8
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.