CVE-2018-12596

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).

Ссылки

http://seclists.org/fulldisclosure/2018/Oct/15
Exploit
Mailing List
Mitigation
Patch
Third Party Advisory
https://github.com/alt3kx/CVE-2018-12596
Exploit
Patch
Third Party Advisory
https://medium.com/%40alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158
https://www.exploit-db.com/exploits/45577/
Exploit
Mitigation
Patch
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Oct/15
Exploit
Mailing List
Mitigation
Patch
Third Party Advisory
https://github.com/alt3kx/CVE-2018-12596
Exploit
Patch
Third Party Advisory
https://medium.com/%40alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158
https://www.exploit-db.com/exploits/45577/
Exploit
Mitigation
Patch
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:episerver:ektron_cms:9.00:-:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.00:sp1:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.00:sp2:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.10:-:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.10:sp1:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.10:sp2:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.20:-:*:*:*:*:*:*

cpe:2.3:a:episerver:ektron_cms:9.20:sp1:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.47919

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-269

Связанные уязвимости

GHSA-pp88-5vm8-r9cr