CVE-2018-17888
9.8CRITICALNUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code executi
Veröffentlicht: 10/12/2018Aktualisiert: 11/21/2024
Beschreibung
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.
KI-AnalyseKI-gestützt
Betroffene Produkte
nuuonuuo_cms
Referenzen
- http://www.securityfocus.com/bid/105717Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02PatchThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/105717Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02PatchThird Party AdvisoryUS Government Resource