PT-2018-17476 · Panda · Panda Global Protection

Filipe Xavier Oliveira · Published 2018-03-12 · Updated 2018-04-10 · CVE-2018-6321

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panda Global Protection version 17.0.1

Description The issue concerns an unquoted Windows search path vulnerability in the panda url filtering service, which allows local users to gain privileges via a malicious artefact.

Recommendations For Panda Global Protection version 17.0.1, update to a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2018-6321

Affected Products

Panda Global Protection

References · 3

• https://osv.dev/vulnerability/CVE-2018-6321 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6321 · Security Note
• http://seclists.org/fulldisclosure/2018/Mar/25 · Note