Riskcovery

CVE-2018-17888

State
Published
Severity
Not scored
Published
Oct 12, 2018
Updated
Sep 17, 2024
Reserved
Oct 2, 2018

Read the record on cve.org

Description

NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-330 USE OF INSUFFICIENTLY RANDOM VALUES CWE-330

Affected Products

ProductVersions
NUUO CMSNUUO
  • All versions 3.1 and priorAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.