8.8

CVE-2018-17872

Exploit
Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Verint ≫ Collaboration Compliance Version < 9.2.1.5545
Verint ≫ Quality Management Platform Version < 9.2.1.5545
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.24% 0.806
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

https://releases.verba.com/?v=9.2
Vendor Advisory
Release Notes
http://packetstormsecurity.com/files/149652/Collaboration-Compliance-And-Quality-Management-Platform-9.1.1.5482-Improper-Access-Control.html
Third Party Advisory
Exploit
VDB Entry
https://seclists.org/bugtraq/2018/Oct/13
Third Party Advisory
Exploit
Mailing List
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-024.txt
Exploit