Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-14611
HistoryApr 10, 2018 - 3:29 p.m.

CVE-2017-14611

2018-04-1015:29:01
CWE-918
[email protected]
web.nvd.nist.gov
4

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.2

Confidence

High

EPSS

0.007

Percentile

79.8%

JSON

SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.

Affected configurations

Nvd
Node
agentejocockpitMatch0.13.0
VendorProductVersionCPE
agentejocockpit0.13.0cpe:2.3:a:agentejo:cockpit:0.13.0:*:*:*:*:*:*:*

Related

prion 2
zdt 2
packetstorm 2
cve 2
veracode 1
cvelist 2
exploitpack 1
nvd 1
exploitdb 1
prion
prion
Server side request forgery (ssrf)
2018-04-10 15:29:00
Server side request forgery (ssrf)
2018-05-02 15:29:00
zdt
zdt
Cockpit CMS 0.13.0 Server Side Request Forgery Vulnerability
2018-04-08 00:00:00
Cockpit CMS 0.4.4-0.5.5 - Server-Side Request Forgery Vulnerability
2018-05-02 00:00:00
packetstorm
packetstorm
Cockpit CMS 0.13.0 Server Side Request Forgery
2018-04-06 00:00:00
Cockpit CMS 0.5.5 Server-Side Request Forgery
2018-04-28 00:00:00
cve
cve
CVE-2017-14611
2018-04-10 15:29:01
CVE-2018-9302
2018-05-02 15:29:01
veracode
veracode
Sever Side Request Forgery (SSRF)
2018-04-09 03:41:25
cvelist
cvelist
CVE-2017-14611
2018-04-10 15:00:00
CVE-2018-9302
2018-05-02 15:00:00
exploitpack
exploitpack
Cockpit CMS 0.4.4 0.5.5 - Server-Side Request Forgery
2018-05-02 00:00:00
nvd
nvd
CVE-2018-9302
2018-05-02 15:29:01
exploitdb
exploitdb
Cockpit CMS 0.4.4 < 0.5.5 - Server-Side Request Forgery
2018-05-02 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.2

Confidence

High

EPSS

0.007

Percentile

79.8%

JSON
Related for NVD:CVE-2017-14611
prion2zdt2packetstorm2cve2veracode1cvelist2exploitpack1nvd1exploitdb1