Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2018-7602
HistoryJul 19, 2018 - 12:00 a.m.

CVE-2018-7602

2018-07-1900:00:00
ubuntu.com
ubuntu.com
11

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

99.9%

JSON

A remote code execution vulnerability exists within multiple subsystems of
Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple
attack vectors on a Drupal site, which could result in the site being
compromised. This vulnerability is related to Drupal core - Highly critical

  • Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this
    vulnerability are being exploited in the wild.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchdrupal7< 7.26-1ubuntu0.1+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchdrupal7< 7.44-1ubuntu1~16.04.0+esm1UNKNOWN

Related

checkpoint_advisories 1
threatpost 1
exploitpack 2
openvas 17
dsquare 1
nessus 9
osv 4
ibm 1
zdt 2
cve 1
debian 3
packetstorm 2
alpinelinux 1
cisa_kev 1
nuclei 1
debiancve 1
drupal 1
f5 1
fedora 14
seebug 1
prion 1
attackerkb 1
archlinux 1
exploitdb 2
thn 2
impervablog 1
veracode 1
malwarebytes 1
ubuntu 1
fireeye 1
kitploit 1
checkpoint_advisories
checkpoint_advisories
Drupal Core Remote Code Execution (CVE-2018-7602)
2018-04-26 00:00:00
threatpost
threatpost
Ransomware Attack Hits Ukrainian Energy Ministry, Exploiting Drupalgeddon2
2018-04-24 18:34:37
exploitpack
exploitpack
Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)
2018-04-25 00:00:00
Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code (Metasploit)
2018-04-30 00:00:00
openvas
openvas
Debian LTS: Security Advisory for drupal7 (DLA-1365-1)
2018-04-27 00:00:00
Debian Security Advisory DSA 4180-1 (drupal7 - security update)
2018-04-25 00:00:00
Drupal Core Critical Remote Code Execution Vulnerability (SA-CORE-2018-004) (Windows, Version Check)
2018-04-26 00:00:00
dsquare
dsquare
Drupal 7 SA-CORE-2018-004 RCE
2018-05-08 00:00:00
nessus
nessus
Fedora 28 : drupal7 (2018-43c64deada) (Drupalgeddon 2)
2019-01-03 00:00:00
Debian DLA-1365-1 : drupal7 security update (Drupalgeddon 2)
2018-04-27 00:00:00
Fedora 27 : drupal7 (2018-b9ad458866) (Drupalgeddon 2)
2018-05-11 00:00:00
osv
osv
CVE-2018-7602
2018-07-19 17:29:00
drupal7 - security update
2018-04-25 00:00:00
drupal7 - security update
2018-04-26 00:00:00
ibm
ibm
Security Bulletin: API Connect Developer Portal is affected by a Drupal vulnerability (CVE-2018-7602)
2018-06-15 07:09:14
zdt
zdt
Drupal < 7.58 - drupalgeddon3 Authenticated Remote Code Execution (PoC) Exploit
2018-04-26 00:00:00
Drupal < 7.58 - Drupalgeddon3 Authenticated Remote Code Exploit
2018-05-01 00:00:00
cve
cve
CVE-2018-7602
2018-07-19 17:29:00
debian
debian
[SECURITY] [DLA 1365-1] drupal7 security update
2018-04-26 09:28:04
[SECURITY] [DSA 4180-1] drupal7 security update
2018-04-25 20:13:52
[SECURITY] [DSA 4180-1] drupal7 security update
2018-04-25 20:13:52
packetstorm
packetstorm
Drupal drupgeddon3 Remote Code Execution
2018-04-26 00:00:00
Drupalgeddon3 Remote Code Execution
2018-04-30 00:00:00
alpinelinux
alpinelinux
CVE-2018-7602
2018-07-19 17:29:00
cisa_kev
cisa_kev
Drupal Core Remote Code Execution Vulnerability
2022-04-13 00:00:00
nuclei
nuclei
Drupal - Remote Code Execution
2022-02-04 19:09:58
debiancve
debiancve
CVE-2018-7602
2018-07-19 17:29:00
drupal
drupal
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-04-25 00:00:00
f5
f5
K59591931 : Drupal vulnerability CVE-2018-7602
2018-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: drupal7-7.59-1.fc28
2018-05-05 20:37:11
[SECURITY] Fedora 28 Update: drupal7-7.60-2.fc28
2018-12-03 01:39:08
[SECURITY] Fedora 28 Update: drupal7-7.64-1.fc28
2019-03-06 15:28:58
seebug
seebug
Drupal core Remote Code Execution(CVE-2018-7602)
2018-04-26 00:00:00
prion
prion
Remote code execution
2018-07-19 17:29:00
attackerkb
attackerkb
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-07-19 00:00:00
archlinux
archlinux
[ASA-201804-10] drupal: arbitrary command execution
2018-04-27 00:00:00
exploitdb
exploitdb
Drupal &lt; 7.58 - &#039;Drupalgeddon3&#039; (Authenticated) Remote Code Execution (PoC)
2018-04-25 00:00:00
Drupal &lt; 7.58 - &#039;Drupalgeddon3&#039; (Authenticated) Remote Code (Metasploit)
2018-04-30 00:00:00
thn
thn
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack
2018-04-26 12:32:00
Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately
2018-04-25 16:41:00
impervablog
impervablog
The State of Web Application Vulnerabilities in 2018
2019-01-09 14:00:26
veracode
veracode
Remote Code Execution (RCE)
2018-04-26 10:18:46
malwarebytes
malwarebytes
A look into Drupalgeddon’s client-side attacks
2018-05-18 15:00:00
ubuntu
ubuntu
Drupal vulnerabilities
2021-03-15 00:00:00
fireeye
fireeye
Think Fast: Time Between Disclosure, Patch Release and Vulnerability Exploitation — Intelligence for Vulnerability Management, Part Two
2020-04-13 00:00:00
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

99.9%

JSON
Related for UB:CVE-2018-7602
checkpoint_advisories1threatpost1exploitpack2openvas17dsquare1nessus9osv4ibm1zdt2cve1debian3packetstorm2alpinelinux1cisa_kev1nuclei1debiancve1drupal1f51fedora14seebug1prion1attackerkb1archlinux1exploitdb2thn2impervablog1veracode1malwarebytes1ubuntu1fireeye1kitploit1