Lucene search
+L

7 matches found

Prion
Prion
•added 2018/12/21 11:29 p.m.•23 views

Design/Logic Flaw

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

6.5CVSS6.9AI score0.01747EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2018/12/21 11:29 p.m.•28 views

CVE-2018-20226

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

7.2CVSS6.8AI score
SaveExploits0References3
Mend
Mend
•added 2018/12/21 10:00 p.m.•6 views

CVE-2018-20226

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

8.6CVSS0.01747EPSS
SaveExploits0References3
CVE
CVE
•added 2018/12/21 10:00 p.m.•61 views

CVE-2018-20226

The vulnerability CVE-2018-20226 affects THEHIVE PROJECT Cortex up to version 2.1.3, caused by not overriding Role.toString. This enables an organization administrator to add a super administrator (privilege escalation). Exploitation details are not provided in the supplied documents. Remediation...

7.2CVSS6.8AI score0.01747EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/12/21 10:00 p.m.•31 views

CVE-2018-20226

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

6.9AI score0.01747EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/12/21 12:00 a.m.•5 views

PT-2018-15294

Name of the Vulnerable Software and Affected Versions THEHIVE PROJECT Cortex versions prior to 2.1.3 Description The issue arises from the lack of overriding the Role.toString method, allowing an organization administrator to add a super administrator. Recommendations For versions prior to 2.1.3,...

7.2CVSS0.01747EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/21 12:00 a.m.•6 views

CVE-2018-20226: Undefined Security Weakness

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

7.2CVSS5.8AI score0.01747EPSS
SaveExploits0References1
Rows per page
Query Builder