PT-2019-9232 · Unknown · Logontracer

Shoji Baba · Publicado 2019-01-09 · Atualizado 2019-01-15 · CVE-2018-16167

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LogonTracer versions 1.2.0 and earlier

Description The issue allows remote attackers to execute arbitrary OS commands.

Recommendations For LogonTracer versions 1.2.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-16167

Produtos afetados

Logontracer

Referências · 5

• 🔥 https://exploit-db.com/exploits/49918 · Exploit
• https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.1 · Nota
• https://jvn.jp/en/vu/JVNVU98026636/index.html · Nota
• https://osv.dev/vulnerability/CVE-2018-16167 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16167 · Nota de Segurança