CVE-2018-13140 in Antidote

Résumé

par MITRE

Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 04/07/2018
• Divulgation: 24/09/2018
• Modérer: accepté
• Entrée: VDB-124427
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 8.1 (NVD)
• EPSS: 0.06631
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-13140
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-13140
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-13140/