vulnwire
8.8high

CVE-2017-113191 exploit

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain pr…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.6%
percentile 93%
Public exploits
1
Exploit-DB

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.

Exploit prediction (EPSS)

5.56% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.

Exploits and detections

  • EDB-43210 Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation · webapps · 2017-12-05

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.06.5AV:N/AC:L/Au:S/C:P/I:P/A:P

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

  • exploit-db.com /exploits/43210/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • packetstormsecurity.com /files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.