7.5high
CVE-2018-4993in critical feed1 exploit
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO h…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
86.7%
percentile 100%
Public exploits
1
Metasploit
Summary
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
Exploit prediction (EPSS)
86.72% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- Metasploit auxiliary/fileformat/badpdf BADPDF Malicious PDF Creator · metasploit auxiliary, normal rank
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- n/a Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions
Classification
- Weakness
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
- helpx.adobe.com /security/products/acrobat/apsb18-09.html · x_refsource_MISC, x_transferred
- securitytracker.com /id/1040920 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securityfocus.com /bid/104177 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2018-4993
- NVD: CVE-2018-4993
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.