CVE-2018-1000832

Опубликовано: 20 дек. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

Ссылки

https://0dd.zone/2018/10/28/zoneminder-Object-Injection/
Exploit
Third Party Advisory
https://github.com/ZoneMinder/zoneminder/issues/2271
Exploit
Issue Tracking
Third Party Advisory
https://0dd.zone/2018/10/28/zoneminder-Object-Injection/
Exploit
Third Party Advisory
https://github.com/ZoneMinder/zoneminder/issues/2271
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*

Версия до 1.32.2 (включая)

EPSS

Процентиль: 94%

0.06598

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-502

Связанные уязвимости

CVE-2018-1000832

CVSS3: 9.8

ubuntu

почти 8 лет назад

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

CVE-2018-1000832

CVSS3: 9.8

debian

почти 8 лет назад

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in ...

GHSA-5h2c-x34m-pf7p

CVSS3: 9.8

github

больше 4 лет назад

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

ALT-PU-2018-2845

CVSS3: 9.8

altlinux

почти 8 лет назад

ALT-PU-2018-2845: package `zoneminder` update to version 1.32.3-alt1

EPSS

Процентиль: 94%

0.06598

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-502