CVE-2017-15918
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.2%
from disclosure to weapon35 days
Published on NVDNov 1
1st PoC+35d
exploitation probability
1.2%top 36% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/43221/unverifiedexploitdbwww.exploit-db.com/exploits/43221unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.