CVE-2018-1163

critical · 9.8

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13. The specific flaw exists within JSON RPC Request handling. By setting the checksession parameter to a specific value, it is possible to bypass authentication to critical functions. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4752.

9.8

CVSS

16.0%

EPSS (exploit prob.)

97th

EPSS percentile

2018-02-08

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
quest	netvault_backup	11.2.0.13

Check a specific version with /api/v1/cve/match.

References

https://zerodayinitiative.com/advisories/ZDI-18-006
https://zerodayinitiative.com/advisories/ZDI-18-006

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-1163