Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2017-18213
Analyzed
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-04 Mar, 2018 | 02:29
Updated At-03 Oct, 2019 | 00:03

In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.07.2HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary2.06.5MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
CPE Matches

exponentcms
exponentcms
>>exponent_cms>>Versions up to 2.4.1(inclusive)
cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*
exponentcms
exponentcms
>>exponent_cms>>2.4.1
cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p1:*:*:*:*:*:*
exponentcms
exponentcms
>>exponent_cms>>2.4.1
cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p2:*:*:*:*:*:*
exponentcms
exponentcms
>>exponent_cms>>2.4.1
cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p3:*:*:*:*:*:*
exponentcms
exponentcms
>>exponent_cms>>2.4.1
cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p4:*:*:*:*:*:*
exponentcms
exponentcms
>>exponent_cms>>2.4.1
cpe:2.3:a:exponentcms:exponent_cms:2.4.1:p5:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-noinfoPrimarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
http://www.exponentcms.org/news/patch-6-released-for-v2-4-1-to-fix-a-few-big-issuescve@mitre.org
Vendor Advisory
https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch6cve@mitre.org
Third Party Advisory
Change History
0Changes found

Details not found