PT-2018-15070 · Oracle · Tarantella Enterprise

Rafael Pedrero · Published 2018-12-05 · Updated 2020-08-24 · CVE-2018-19754

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tarantella Enterprise versions prior to 3.11

Description The issue allows bypassing Access Control, which could lead to unauthorized access.

Recommendations For versions prior to 3.11, update to version 3.11 or later to resolve the issue.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2018-19754

Affected Products

Tarantella Enterprise

References · 4

• 🔥 http://packetstormsecurity.com/files/150542/Tarantella-Enterprise-Security-Bypass.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Nov/67 · Exploit
• https://osv.dev/vulnerability/CVE-2018-19754 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19754 · Security Note