PT-2018-14700 · Royal · Royal Browser Extensions Ts

Jakub Palaczynski · Published 2018-11-20 · Updated 2021-09-08 · CVE-2018-18865

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Royal browser extensions TS versions prior to 4.3.60728 Royal browser extensions TSX versions prior to 3.3.1

Description The issue allows credentials disclosure.

Recommendations For Royal browser extensions TS versions prior to 4.3.60728, update to version 4.3.60728 or later. For Royal browser extensions TSX versions prior to 3.3.1, update to version 3.3.1 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-18865

Affected Products

Royal Browser Extensions Ts

References · 6

• 🔥 http://seclists.org/fulldisclosure/2018/Nov/25 · Exploit
• 🔥 https://exploit-db.com/exploits/45783 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Nov/4 · Exploit
• 🔥 http://packetstormsecurity.com/files/150136/Royal-TS-X-Information-Disclosure.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-18865 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18865 · Security Note