CVE-2018-10079

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.77% chance of exploitation in the next 30 days, 53th percentile

Published

2018-04-20

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injectio…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44493

References

• CVE Record
• NVD entry

Related

• CVE-2018-10078
• CVE-2018-10080
• CVE-2018-10077
• CVE-2018-10081
• CVE-2018-10070
• CVE-2018-10082