CVE-2018-17186
CVE-2018-17186
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Nov 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.
Affected products
Apache Software Foundation · Apache SyncopeWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →