Lucene search
+L

4 matches found

Prion
Prion
•added 2017/12/31 7:29 p.m.•26 views

Design/Logic Flaw

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

10CVSS9.5AI score0.13821EPSS
SaveExploits3References4Affected Software1
NVD
NVD
•added 2017/12/31 7:29 p.m.•30 views

CVE-2017-18001

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

10CVSS9.5AI score0.13821EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2017/12/31 7:00 p.m.•32 views

CVE-2017-18001

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

9.6AI score0.13821EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/31 12:00 a.m.•4 views

CVE-2017-18001: Missing Authentication for Critical Function

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

10CVSS8.3AI score0.13821EPSS
SaveExploits3References2
Rows per page
Query Builder