CVE-2018-1000535

{"id": "CVE-2018-1000535", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-06-26T16:29:01.993", "references": [{"url": "https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/lmsgit/lms/issues/1271", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e."}, {"lang": "es", "value": "lms en versiones iguales o anteriores a la LMS_011123 contiene una vulnerabilidad de divulgaci\u00f3n de archivos locales en la funcionalidad de lectura de archivos en el m\u00f3dulo LMS que puede resultar en la lectura de archivos en el servidor. Este ataque parece ser explotable mediante un par\u00e1metro GET. La vulnerabilidad parece haber sido solucionada tras el commit con ID 254765e."}], "lastModified": "2019-09-18T20:59:35.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lms:lms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0569BA20-9B90-45F2-982F-AF8264E0CE3A", "versionEndIncluding": "011123"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}