CVE-2017-17736

EPSS 69.4%

Vexday Risk Score

30Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 69.4%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

23 mar 2018Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.

Productos afectados

n/a · n/a

Referencias

https://blog.hivint.com/advisory-access-control-bypass-in-kentico-cms-cve-2017-17736-49e1e43ae55b