CVE-2018-20306

A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1.

CVSS v3 5.4 MEDIUM
CVSS v2.0 3.5 LOW

5.4^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:pulsesecure:virtual_traffic_manager::::::::
	cpe:2.3:a:pulsesecure:virtual_traffic_manager::::::::
	cpe:2.3:a:pulsesecure:virtual_traffic_manager::::::::

History

No history.

Information

Published : 2018-12-20 09:29

Updated : 2023-12-10 12:44

NVD link : CVE-2018-20306

Mitre link : CVE-2018-20306

CVE.ORG link : CVE-2018-20306

JSON object : View

Products Affected

pulsesecure

virtual_traffic_manager

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2018-20306", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2018-12-20T09:29:00.433", "references": [{"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1."}, {"lang": "es", "value": "Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la interfaz web de usuario administrador de Pulse Secure Virtual Traffic Manager podr\u00eda permitir que un atacante autenticado remoto inyecte scripts web o HTML mediante un sitio web manipulado y robe datos sensibles y credenciales. Las versiones afectadas de Pulse Secure Virtual Traffic Manager son las 9.9 anteriores a la 9.9r2 y la 10.4r1."}], "lastModified": "2019-01-08T14:37:32.307", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pulsesecure:virtual_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB9C62CE-3A29-4999-BD64-2DD06819337D", "versionEndExcluding": "9.9r2", "versionStartIncluding": "9.9"}, {"criteria": "cpe:2.3:a:pulsesecure:virtual_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD162E85-068C-4263-8F61-3E07B2E53035", "versionEndExcluding": "10.4r1", "versionStartIncluding": "10.4"}, {"criteria": "cpe:2.3:a:pulsesecure:virtual_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9390EFDB-D360-472A-9386-0A15DB9D60B7", "versionEndExcluding": "17.2r1", "versionStartIncluding": "17.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}