Privilege escalation in Subrion Cms
CVE-2018-14836
Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.
Vulnerability class: Privilege Escalation
EPSS: 0.010 (59.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Subrion Subrion_cms — versions 4.2.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-14836?
- CVE-2018-14836 is a medium-severity vulnerability in Subrion Cms, classified under Improper Privilege Management. CVSS score: 6.5/10. Published 2018-08-02.
- How severe is CVE-2018-14836?
- Medium severity. CVSS v3 base score is 6.5 out of 10.