CVEvulnerability
CVE-2018-12596
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).
Affected configurations
• episerver ektron cms 9.00
• episerver ektron cms 9.10
• episerver ektron cms 9.20
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://seclists.org/fulldisclosure/2018/Oct/15 Exploit, Mailing List, Mitigation, Patch, Third Party Advisory
- https://github.com/alt3kx/CVE-2018-12596 Exploit, Patch, Third Party Advisory
- https://medium.com/%40alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158 medium.com
- https://www.exploit-db.com/exploits/45577/ Exploit, Mitigation, Patch, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2018/Oct/15 Exploit, Mailing List, Mitigation, Patch, Third Party Advisory
- https://github.com/alt3kx/CVE-2018-12596 Exploit, Patch, Third Party Advisory
- https://medium.com/%40alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158 medium.com
- https://www.exploit-db.com/exploits/45577/ Exploit, Mitigation, Patch, Third Party Advisory, VDB Entry