CVEvulnerability

CVE-2018-12237

7.2 HIGH Published 2019-01-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-01-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges.

Affected configurations

• symantec reporter (>= 10.1 < 10.1.5.6) • symantec reporter (>= 10.2 < 10.2.1.8)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References