Lucene search

[email protected]NVD:CVE-2018-17368

HistorySep 23, 2018 - 10:29 p.m.

CVE-2018-17368

2018-09-2322:29:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks.

Affected configurations

Nvd

Node

publiccmspubliccmsMatch4.0.180825

VendorProductVersionCPE
publiccmspubliccms4.0.180825cpe:2.3:a:publiccms:publiccms:4.0.180825:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
publiccms	publiccms	4.0.180825	cpe:2.3:a:publiccms:publiccms:4.0.180825:::::::*

References

github.com/sanluan/PublicCMS/issues/18

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

Related for NVD:CVE-2018-17368

prion1 cve1 cvelist1