PT-2018-15037 · Trend Micro · Ossec

Nealdjo · Publicado 2018-11-29 · Atualizado 2019-01-04 · CVE-2018-19666

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OSSEC versions through 3.1.0

Description The issue allows local users to gain NT AUTHORITYSYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.

Recommendations For OSSEC versions through 3.1.0, update to a version later than 3.1.0 to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-19666

Produtos afetados

Ossec

Referências · 4

• 🔥 https://github.com/ossec/ossec-hids/issues/1585 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19666 · Nota
• https://osv.dev/vulnerability/CVE-2018-19666 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19666 · Nota de Segurança