Lucene search

CVE-2018-0015

🗓️ 22 Feb 2018 22:00:29Reported by juniperType

A malicious user can access Python debug console on AppFormix, executing system commands with root privilege

Reporter	Title	Published	Views	Family All 3
Prion	Design/Logic Flaw	22 Feb 201822:29	–	prion
Cvelist	CVE-2018-0015 AppFormix: Debug Shell Command Execution in AppFormix Agent	22 Feb 201822:00	–	cvelist
NVD	CVE-2018-0015	22 Feb 201822:29	–	nvd

Nvd

Node

juniper appformixRange≤2.7.3

juniper appformixRange2.11–2.11.3

juniper appformixRange2.15–2.15.2

[
  {
    "product": "AppFormix",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThanOrEqual": "2.7.3",
        "status": "affected",
        "version": "2.7",
        "versionType": "custom"
      },
      {
        "lessThan": "2.11.3",
        "status": "affected",
        "version": "2.11",
        "versionType": "custom"
      },
      {
        "lessThan": "2.15.2",
        "status": "affected",
        "version": "2.15",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA10843

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Feb 2018 22:29Current

7.8High risk

Vulners AI Score7.8

CVSS28.5

CVSS37.5 - 9.8

EPSS0.001

CWE-862