CVE-2018-12237: OS Command Injection
First published: Thu Jan 24 2019(Updated: )
The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Reporter | >=10.1<10.1.5.6 | |
| Symantec Reporter | >=10.2<10.2.1.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/severity
- agent/tags
- agent/event
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec reporter
- version/symantec reporter/10.1
- version/symantec reporter/10.2