high7.8Public exploit code
CVE-2018-10079
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updati…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities2018-04-18 · webapps · xml
Impact
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vertiv | Watchdog Console | Version 3.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
- https://www.exploit-db.com/exploits/44493/
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
- https://www.exploit-db.com/exploits/44493/