9

CVE-2017-17384

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ispconfig ≫ Ispconfig Version3.0.2
Ispconfig ≫ Ispconfig Version3.0.2.1
Ispconfig ≫ Ispconfig Version3.0.2.2
Ispconfig ≫ Ispconfig Version3.0.2.2 Updateb1
Ispconfig ≫ Ispconfig Version3.0.3
Ispconfig ≫ Ispconfig Version3.0.3 Updateb1
Ispconfig ≫ Ispconfig Version3.0.3 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.3.1
Ispconfig ≫ Ispconfig Version3.0.3.1 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.3.1 Updaterc2
Ispconfig ≫ Ispconfig Version3.0.3.2
Ispconfig ≫ Ispconfig Version3.0.3.2 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.3.3
Ispconfig ≫ Ispconfig Version3.0.3.3 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.4
Ispconfig ≫ Ispconfig Version3.0.4 Updateb1
Ispconfig ≫ Ispconfig Version3.0.4.1
Ispconfig ≫ Ispconfig Version3.0.4.1 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.4.1 Updaterc2
Ispconfig ≫ Ispconfig Version3.0.4.2
Ispconfig ≫ Ispconfig Version3.0.4.3
Ispconfig ≫ Ispconfig Version3.0.4.6
Ispconfig ≫ Ispconfig Version3.0.4.6 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.5
Ispconfig ≫ Ispconfig Version3.0.5 Updatealpha1
Ispconfig ≫ Ispconfig Version3.0.5 Updateb1
Ispconfig ≫ Ispconfig Version3.0.5 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.5 Updaterc2
Ispconfig ≫ Ispconfig Version3.0.5.1
Ispconfig ≫ Ispconfig Version3.0.5.2
Ispconfig ≫ Ispconfig Version3.0.5.3
Ispconfig ≫ Ispconfig Version3.0.5.4
Ispconfig ≫ Ispconfig Version3.0.5.4 Updateb1
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep1
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep2
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep3
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep4
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep5
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep6
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep7
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep8
Ispconfig ≫ Ispconfig Version3.0.5.4 Updatep9
Ispconfig ≫ Ispconfig Version3.0.5.4 Updaterc1
Ispconfig ≫ Ispconfig Version3.0.5.4 Updaterc2
Ispconfig ≫ Ispconfig Version3.1
Ispconfig ≫ Ispconfig Version3.1.1
Ispconfig ≫ Ispconfig Version3.1.1 Updatep1
Ispconfig ≫ Ispconfig Version3.1.2
Ispconfig ≫ Ispconfig Version3.1.3
Ispconfig ≫ Ispconfig Version3.1.4
Ispconfig ≫ Ispconfig Version3.1.5
Ispconfig ≫ Ispconfig Version3.1.6
Ispconfig ≫ Ispconfig Version3.1.7
Ispconfig ≫ Ispconfig Version3.1.7 Updatep1
Ispconfig ≫ Ispconfig Version3.1.8
Ispconfig ≫ Ispconfig Version3.1.8 Updatep1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.642
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.