PT-2018-13220 · Posim · Posim Evo

Published 2018-08-23 · Updated 2018-10-26 · CVE-2018-15808

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions POSIM EVO version 15.13 for Windows

Description The issue concerns hardcoded database credentials for the root database user in POSIM EVO. This could lead to a breach of confidentiality, integrity, or availability, and may allow attackers to remotely execute code on associated POSIM EVO clients.

Recommendations For POSIM EVO version 15.13 for Windows, consider changing the hardcoded database credentials for the root user to unique, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the database to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-15808

Affected Products

Posim Evo

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15808 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15808 · Vendor Advisory
• https://versprite.com/advisories/posim-evo-for-windows-2 · Note