PT-2018-14700 · Royal · Royal Browser Extensions Ts

Jakub Palaczynski · Publicado 2018-11-20 · Atualizado 2021-09-08 · CVE-2018-18865

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Royal browser extensions TS versions prior to 4.3.60728 Royal browser extensions TSX versions prior to 3.3.1

Description The issue allows credentials disclosure.

Recommendations For Royal browser extensions TS versions prior to 4.3.60728, update to version 4.3.60728 or later. For Royal browser extensions TSX versions prior to 3.3.1, update to version 3.3.1 or later.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-18865

Produtos afetados

Royal Browser Extensions Ts

Referências · 6

• 🔥 http://seclists.org/fulldisclosure/2018/Nov/25 · Exploit
• 🔥 https://exploit-db.com/exploits/45783 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Nov/4 · Exploit
• 🔥 http://packetstormsecurity.com/files/150136/Royal-TS-X-Information-Disclosure.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-18865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18865 · Nota de Segurança