Lucene search

[email protected]NVD:CVE-2018-8567

HistoryNov 14, 2018 - 1:29 a.m.

CVE-2018-8567

2018-11-1401:29:01

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka “Microsoft Edge Elevation of Privilege Vulnerability.” This affects Microsoft Edge.

Affected configurations

Nvd

Node

microsoftedgeMatch-

AND

microsoftwindows_serverMatch2019

microsoftwindows_10Match1709

microsoftwindows_10Match1803

microsoftwindows_10Match1809

VendorProductVersionCPE
microsoftedge-cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
microsoftwindows_server2019cpe:2.3:a:microsoft:windows_server:2019:*:*:*:*:*:*:*
microsoftwindows_101709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
microsoftwindows_101803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
microsoftwindows_101809cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	edge	-	cpe:2.3:a:microsoft:edge:-:::::::*
microsoft	windows_server	2019	cpe:2.3:a:microsoft:windows_server:2019:::::::*
microsoft	windows_10	1709	cpe:2.3:o:microsoft:windows_10:1709:::::::*
microsoft	windows_10	1803	cpe:2.3:o:microsoft:windows_10:1803:::::::*
microsoft	windows_10	1809	cpe:2.3:o:microsoft:windows_10:1809:::::::*