1. Home
  2. CVE Database
  3. CVE-2018-18254
HIGH · 7.8

CVE-2018-18254

An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing...

Vulnerability Description

An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing a Trojan horse program at an app pathname.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CapmonAccess Manager<= 5.4.1.1005

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2018-18254?

CVE-2018-18254 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing...

How severe is CVE-2018-18254?

CVE-2018-18254 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-18254?

Check the references section above for vendor advisories and patch information. Affected products include: Capmon Access Manager.