PT-2018-11280 · Episerver · Episerver Ektron Cms

Alex Hernandez + 1 · Publicado 2018-10-10 · Atualizado 2019-10-03 · CVE-2018-12596

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Episerver Ektron CMS versions prior to 9.0 SP3 Site CU 31 Episerver Ektron CMS versions 9.1 prior to SP3 Site CU 45 Episerver Ektron CMS versions 9.2 prior to SP2 Site CU 22

Description The issue allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is normally available exclusively for local admins.

Recommendations For Episerver Ektron CMS versions prior to 9.0 SP3 Site CU 31, update to version 9.0 SP3 Site CU 31 or later. For Episerver Ektron CMS versions 9.1 prior to SP3 Site CU 45, update to version 9.1 SP3 Site CU 45 or later. For Episerver Ektron CMS versions 9.2 prior to SP2 Site CU 22, update to version 9.2 SP2 Site CU 22 or later.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2018-12596

Produtos afetados

Episerver Ektron Cms

Referências · 7

• 🔥 https://github.com/alt3kx/CVE-2018-12596 · Exploit
• 🔥 https://medium.com/@alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158 · Exploit
• 🔥 https://exploit-db.com/exploits/45577 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Oct/15 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12596 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12596 · Aviso do Fabricante
• https://medium.com/%40alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158 · Nota