CVE-2018-17892 - AskarLabs CVE Database

CVE-2018-17892

Vendor Nuuo

Product NUUO CMS

Weakness CWE-732

Published October 12, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utilized as intended, which could allow user account compromise and may allow for remote code execution.

Key dates

02Disclosure timeline

October 12, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-17892 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/732.html

Related vulnerabilities

04Related CVE

CVE-2025-36193 IBM Transformation Advisor incorrect permissions CVE-2025-30063 Excessive permissions on configuration files containing database logins and passwords CVE-2026-41217 BIG-IP tmsh vulnerability CVE-2026-26095 Incorrect Permission Assignment for Critical Resource in Owl opds CVE-2025-14604 The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2