CVE-2018-1000833

Опубликовано: 20 дек. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

Ссылки

https://0dd.zone/2018/10/28/zoneminder-Object-Injection-2/
Third Party Advisory
https://github.com/ZoneMinder/zoneminder/issues/2272
Issue Tracking
Patch
Third Party Advisory
https://0dd.zone/2018/10/28/zoneminder-Object-Injection-2/
Third Party Advisory
https://github.com/ZoneMinder/zoneminder/issues/2272
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*

Версия до 1.32.2 (включая)

EPSS

Процентиль: 88%

0.03232

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

CVE-2018-1000833

CVSS3: 9.8

ubuntu

почти 8 лет назад

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

CVE-2018-1000833

CVSS3: 9.8

debian

почти 8 лет назад

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in ...

GHSA-gf3j-qpxp-849p

CVSS3: 9.8

github

больше 4 лет назад

ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

ALT-PU-2018-2845

CVSS3: 9.8

altlinux

почти 8 лет назад

ALT-PU-2018-2845: package `zoneminder` update to version 1.32.3-alt1

EPSS

Процентиль: 88%

0.03232

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502