Lucene search
PRIOn knowledge basePRION:CVE-2018-12596HistoryOct 10, 2018 - 9:29 p.m.
Design/Logic Flaw
2018-10-1021:29:00
PRIOn knowledge base
www.prio-n.com
3
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the “activateuser.aspx” page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).
| CPE | Name | Operator | Version |
|---|---|---|---|
| ektron_cms | eq | 9.0 sp2 | |
| ektron_cms | eq | 9.0 sp1 | |
| ektron_cms | eq | 9.10 sp2 | |
| ektron_cms | eq | 9.10 sp1 | |
| ektron_cms | eq | 9.20 sp1 | |
| ektron_cms | eq | 9.00 | |
| ektron_cms | eq | 9.10 | |
| ektron_cms | eq | 9.20 |
Related
cvelist
cvelist
CVE-2018-12596
2018-10-10 21:00:00
zdt
zdt
Ektron CMS 9.20 SP2 - Improper Access Restrictions Vulnerability
2018-10-10 00:00:00
cve
cve
CVE-2018-12596
2018-10-10 21:29:01
exploitpack
exploitpack
Ektron CMS 9.20 SP2 - Improper Access Restrictions
2018-10-10 00:00:00
nvd
nvd
CVE-2018-12596
2018-10-10 21:29:01
packetstorm
packetstorm
Ektron CMS 9.20 SP2 Improper Access Restrictions
2018-10-10 00:00:00
exploitdb
exploitdb
Ektron CMS 9.20 SP2 - Improper Access Restrictions
2018-10-10 00:00:00