PT-2019-8878 · Symantec · Symantec Reporter Cli

Publicado 2019-01-24 · Atualizado 2019-02-11 · CVE-2018-12237

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Reporter CLI versions 10.1 prior to 10.1.5.6 Symantec Reporter CLI versions 10.2 prior to 10.2.1.8

Description The issue allows an authenticated malicious administrator with Enable mode access to execute arbitrary OS commands with elevated system privileges due to an OS command injection vulnerability.

Recommendations For Symantec Reporter CLI versions 10.1 prior to 10.1.5.6, update to version 10.1.5.6 or later. For Symantec Reporter CLI versions 10.2 prior to 10.2.1.8, update to version 10.2.1.8 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-12237

Produtos afetados

Symantec Reporter Cli

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-12237 · Aviso do Fabricante
• http://securityfocus.com/bid/106518 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12237 · Nota de Segurança
• https://support.symantec.com/en_US/article.SYMSA1465.html · Aviso do Fabricante