exploitDog

CVE-2018-17872

Опубликовано: 04 окт. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.

Ссылки

http://packetstormsecurity.com/files/149652/Collaboration-Compliance-And-Quality-Management-Platform-9.1.1.5482-Improper-Access-Control.html
Exploit
Third Party Advisory
VDB Entry
https://releases.verba.com/?v=9.2
Release Notes
Vendor Advisory
https://seclists.org/bugtraq/2018/Oct/13
Exploit
Mailing List
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-024.txt
Exploit
http://packetstormsecurity.com/files/149652/Collaboration-Compliance-And-Quality-Management-Platform-9.1.1.5482-Improper-Access-Control.html
Exploit
Third Party Advisory
VDB Entry
https://releases.verba.com/?v=9.2
Release Notes
Vendor Advisory
https://seclists.org/bugtraq/2018/Oct/13
Exploit
Mailing List
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-024.txt
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:verint:collaboration_compliance:*:*:*:*:*:*:*:*

Версия до 9.2.1.5545 (исключая)

cpe:2.3:a:verint:quality_management_platform:*:*:*:*:*:*:*:*

Версия до 9.2.1.5545 (исключая)

EPSS

Процентиль: 80%

0.01457

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-fvjv-x755-wvc8

CVSS3: 8.8

github

больше 3 лет назад

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.

EPSS

Процентиль: 80%

0.01457

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-732