CVE-2018-1252 Vulnerability Details

  /     /     /  

CVE-2018-1252 Metadata Quick Info

CVE Published: 05/06/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: dell | Vendor: RSA | Product: Web Threat Detection
Status : PUBLISHED

---

CVE-2018-1252 Description

RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the tool\'s monitoring and user information by supplying specially crafted input data to the affected application.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: SQL Injection Vulnerability
Source: RSA

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).