Lucene search
Veracode Vulnerability DatabaseVERACODE:6947HistoryJul 05, 2018 - 5:13 a.m.
Access Control Bypass
2018-07-0505:13:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.148 Low
EPSS
Percentile
95.8%
Kentico CMS is affected by an access control bypass vulnerability. An attacker is able to access the installation wizard and initiate the installation of a new starter site which automatically grants Global Administrator access.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kentico.libraries | le | 9.0.50 | |
| kentico.libraries | le | 10.0.47 |
Related
nvd
nvd
CVE-2017-17736
2018-03-23 15:29:00
nessus
nessus
Kentico CMS 9.x < 9.0.51 / 10.x < 10.0.48 Privilege Escalation
2020-06-23 00:00:00
prion
prion
Code injection
2018-03-23 15:29:00
openvas
openvas
cvelist
cvelist
CVE-2017-17736
2018-03-23 15:00:00
cve
cve
CVE-2017-17736
2018-03-23 15:29:00
nuclei
nuclei
Kentico - Installer Privilege Escalation
2022-09-25 20:43:17