deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-8307
Published: 2018-07-11
Description: A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/104631; http://www.securitytracker.com/id/1041272; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8307
CVE: CVE-2018-8308
Published: 2018-07-11
Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-404
References: http://www.securityfocus.com/bid/104669; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8308; http://www.securityfocus.com/bid/104669
CVE: CVE-2018-8309
Published: 2018-07-11
Description: A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/104648; http://www.securitytracker.com/id/1041262; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8309
CVE: CVE-2018-8310
Published: 2018-07-11
Description: A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/104615; http://www.securitytracker.com/id/1041274; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8310
CVE: CVE-2018-8311
Published: 2018-07-11
Description: A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104624; http://www.securitytracker.com/id/1041259; http://www.securitytracker.com/id/1041260
CVE: CVE-2018-8312
Published: 2018-07-11
Description: A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/104645; http://www.securitytracker.com/id/1041254; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8312
CVE: CVE-2018-8313
Published: 2018-07-11
Description: An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8314.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/104670; http://www.securitytracker.com/id/1041263; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8313
CVE: CVE-2018-8314
Published: 2018-07-11
Description: An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, Windows 10. This CVE ID is unique from CVE-2018-8313.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/104652; http://www.securitytracker.com/id/1041263; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8314
CVE: CVE-2018-8319
Published: 2018-07-11
Description: A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-682
References: http://www.securityfocus.com/bid/104655; http://www.securitytracker.com/id/1041268; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319
CVE: CVE-2018-8323
Published: 2018-07-11
Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8299.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104611; http://www.securitytracker.com/id/1041261; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8323
CVE: CVE-2018-8324
Published: 2018-07-11
Description: An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8325.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104650; http://www.securitytracker.com/id/1041255; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8324
CVE: CVE-2018-8325
Published: 2018-07-11
Description: An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8324.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104651; http://www.securitytracker.com/id/1041255; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8325
CVE: CVE-2018-8326
Published: 2018-07-11
Description: A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104656; http://www.securitytracker.com/id/1041266; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8326
CVE: CVE-2018-8327
Published: 2018-07-11
Description: A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects PowerShell Editor, PowerShell Extension.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/104649; http://www.securitytracker.com/id/1041251; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8327
CVE: CVE-2018-8356
Published: 2018-07-11
Description: A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/104664; http://www.securitytracker.com/id/1041257; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8356
CVE: CVE-2018-13879
Published: 2018-07-11
Description: A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, the next step will ask for a username. This field will not save HTML control characters but an error will be displayed that shows the attempted username unescaped via packages/rocketchat-ui-login/client/username/username.js in packages/rocketchat-ui-login/client/username/username.html.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/RocketChat/Rocket.Chat/issues/10795; https://github.com/RocketChat/Rocket.Chat/issues/10795
CVE: CVE-2016-9604
Published: 2018-07-11
Description: It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-732, CWE-347
References: http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-9604.html; http://www.securityfocus.com/bid/102135; https://access.redhat.com/errata/RHSA-2017:1842
CVE: CVE-2017-7467
Published: 2018-07-11
Description: A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787, CWE-119
References: http://www.openwall.com/lists/oss-security/2017/04/18/5; http://www.securityfocus.com/bid/97966; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7467
CVE: CVE-2018-0500
Published: 2018-07-11
Description: Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securitytracker.com/id/1041280; https://access.redhat.com/errata/RHSA-2018:2486; https://curl.haxx.se/docs/adv_2018-70a2.html
CVE: CVE-2018-8007
Published: 2018-07-11
Description: Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3C[PII_REDACTED].6[PII_REDACTED]785603.JavaMail.Joan%40RITA%3E; http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3c[PII_REDACTED].6[PII_REDACTED]856676.JavaMail.Joan%40RITA%3e; http://www.securityfocus.com/bid/104741
CVE: CVE-2013-0589
Published: 2018-07-11
Description: IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mechanism and obtain sensitive information via a crafted e-mail message. IBM X-Force ID: 83371.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/83371; https://www-01.ibm.com/support/docview.wss?uid=swg21671622; https://exchange.xforce.ibmcloud.com/vulnerabilities/83371
CVE: CVE-2013-0592
Published: 2018-07-11
Description: Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 83815.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/83815; https://www-01.ibm.com/support/docview.wss?uid=swg21671622; https://exchange.xforce.ibmcloud.com/vulnerabilities/83815
CVE: CVE-2013-0594
Published: 2018-07-11
Description: Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 83383.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/83383; https://www-01.ibm.com/support/docview.wss?uid=swg21671622; https://exchange.xforce.ibmcloud.com/vulnerabilities/83383
CVE: CVE-2013-2951
Published: 2018-07-11
Description: IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://www-01.ibm.com/support/docview.wss?uid=swg21642097; https://exchange.xforce.ibmcloud.com/vulnerabilities/83621; http://www-01.ibm.com/support/docview.wss?uid=swg21642097
CVE: CVE-2013-2972
Published: 2018-07-11
Description: IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM X-Force ID: 83868.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/83868; https://www-01.ibm.com/support/docview.wss?uid=swg21635993; https://exchange.xforce.ibmcloud.com/vulnerabilities/83868
CVE: CVE-2017-16709
Published: 2018-07-11
Description: Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.html; https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709; https://www.tenable.com/security/research/tra-2019-20
CVE: CVE-2017-16710
Published: 2018-07-11
Description: Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16710; https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16710
CVE: CVE-2018-10197
Published: 2018-07-11
Description: There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the "userdata" table from the "eloam" database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Jul/29; http://seclists.org/fulldisclosure/2018/Jul/29
CVE: CVE-2018-11529
Published: 2018-07-11
Description: VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2018/Jul/28; http://www.securitytracker.com/id/1041311; https://www.debian.org/security/2018/dsa-4251
CVE: CVE-2018-13989
Published: 2018-07-11
Description: Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://packetstormsecurity.com/files/148453/Grundig-Smart-Inter-ctive-3.0-Insecure-Direct-Object-Reference.html; https://www.exploit-db.com/exploits/45022/; https://www.youtube.com/watch?v=H7WYTkgtwsY
CVE: CVE-2018-3929
Published: 2018-07-11
Description: An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted PowerPoint (PPT) document can lead to heap corruption, resulting in remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0596; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0596
CVE: CVE-2018-3930
Published: 2018-07-11
Description: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbgetfp` method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0597; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0597
CVE: CVE-2018-3931
Published: 2018-07-11
Description: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `putShapeProperty` method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0598; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0598
CVE: CVE-2018-3932
Published: 2018-07-11
Description: An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to a stack-based buffer overflow, resulting in remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0599; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0599
CVE: CVE-2018-3933
Published: 2018-07-11
Description: An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbputanld` method.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0600; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0600
CVE: CVE-2018-3936
Published: 2018-07-11
Description: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0603; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0603
CVE: CVE-2018-10231
Published: 2018-07-11
Description: Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI[PII_REDACTED]; https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI[PII_REDACTED]
CVE: CVE-2018-10232
Published: 2018-07-11
Description: Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI[PII_REDACTED]; https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI[PII_REDACTED]
CVE: CVE-2018-10633
Published: 2018-07-11
Description: Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/104710; https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01; http://www.securityfocus.com/bid/104710
CVE: CVE-2018-10635
Published: 2018-07-11
Description: In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: http://www.securityfocus.com/bid/104710; https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01; http://www.securityfocus.com/bid/104710
CVE: CVE-2018-0024
Published: 2018-07-11
Description: An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 12.3 versions prior to 12.3R11 on EX Series; 14.1X53 versions prior to 14.1X53-D30 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100;; 15.1X49 versions prior to 15.1X49-D20 on SRX Series.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/104718; http://www.securitytracker.com/id/1041314; https://kb.juniper.net/JSA10857
CVE: CVE-2018-0025
Published: 2018-07-11
Description: When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious actor through a man-in-the-middle attack or by authentic servers subverted by malicious actors. FTP, and Telnet pass-through authentication services are not affected. Affected releases are Juniper Networks SRX Series: 12.1X46 versions prior to 12.1X46-D67 on SRX Series; 12.3X48 versions prior to 12.3X48-D25 on SRX Series; 15.1X49 versions prior to 15.1X49-D35 on SRX Series.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-300, CWE-319
References: http://www.securityfocus.com/bid/104719; http://www.securitytracker.com/id/1041316; https://kb.juniper.net/JSA10858