Lucene search

PRIOn knowledge basePRION:CVE-2018-4993

HistoryJul 09, 2018 - 7:29 p.m.

Information disclosure

2018-07-0919:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.969 High

EPSS

Percentile

99.7%

JSON

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.

CPENameOperatorVersion
acrobat_dcge15.006.30060
acrobat_dcle15.006.30417
acrobat_dcge15.008.20082
acrobat_dcle18.011.20038
acrobat_dcge17.011.30059
acrobat_dcle17.011.30079
acrobat_reader_dcge15.006.30060
acrobat_reader_dcle15.006.30417
acrobat_reader_dcge15.008.20082
acrobat_reader_dcle18.011.20038

Name	Operator	Version
acrobat_dc	ge	15.006.30060
acrobat_dc	le	15.006.30417
acrobat_dc	ge	15.008.20082
acrobat_dc	le	18.011.20038
acrobat_dc	ge	17.011.30059
acrobat_dc	le	17.011.30079
acrobat_reader_dc	ge	15.006.30060
acrobat_reader_dc	le	15.006.30417
acrobat_reader_dc	ge	15.008.20082
acrobat_reader_dc	le	18.011.20038

Rows per page:

1-10 of 121

References

www.securityfocus.com/bid/104177

www.securitytracker.com/id/1040920

helpx.adobe.com/security/products/acrobat/apsb18-09.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.969 High

EPSS

Percentile

99.7%

JSON

Related for PRION:CVE-2018-4993