Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-12564

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2018-12564
  • Linaro » Lava » Version: 2013.12
    cpe:2.3:a:linaro:lava:2013.12
  • Linaro » Lava » Version: 2013.12.1
    cpe:2.3:a:linaro:lava:2013.12.1
  • Linaro » Lava » Version: 2014.01
    cpe:2.3:a:linaro:lava:2014.01
  • Linaro » Lava » Version: 2014.02
    cpe:2.3:a:linaro:lava:2014.02
  • Linaro » Lava » Version: 2014.03
    cpe:2.3:a:linaro:lava:2014.03
  • Linaro » Lava » Version: 2014.04
    cpe:2.3:a:linaro:lava:2014.04
  • Linaro » Lava » Version: 2014.05
    cpe:2.3:a:linaro:lava:2014.05
  • Linaro » Lava » Version: 2014.06
    cpe:2.3:a:linaro:lava:2014.06
  • Linaro » Lava » Version: 2014.06.22
    cpe:2.3:a:linaro:lava:2014.06.22
  • Linaro » Lava » Version: 2014.06.24
    cpe:2.3:a:linaro:lava:2014.06.24
  • Linaro » Lava » Version: 2014.07
    cpe:2.3:a:linaro:lava:2014.07
  • Linaro » Lava » Version: 2014.07.1
    cpe:2.3:a:linaro:lava:2014.07.1
  • Linaro » Lava » Version: 2014.08
    cpe:2.3:a:linaro:lava:2014.08
  • Linaro » Lava » Version: 2014.08.1
    cpe:2.3:a:linaro:lava:2014.08.1
  • Linaro » Lava » Version: 2014.08.2
    cpe:2.3:a:linaro:lava:2014.08.2
  • Linaro » Lava » Version: 2014.09
    cpe:2.3:a:linaro:lava:2014.09
  • Linaro » Lava » Version: 2014.09.1
    cpe:2.3:a:linaro:lava:2014.09.1
  • Linaro » Lava » Version: 2014.12
    cpe:2.3:a:linaro:lava:2014.12
  • Linaro » Lava » Version: 2015.01
    cpe:2.3:a:linaro:lava:2015.01
  • Linaro » Lava » Version: 2015.03
    cpe:2.3:a:linaro:lava:2015.03
  • Linaro » Lava » Version: 2015.03.1
    cpe:2.3:a:linaro:lava:2015.03.1
  • Linaro » Lava » Version: 2015.04
    cpe:2.3:a:linaro:lava:2015.04
  • Linaro » Lava » Version: 2015.04.1
    cpe:2.3:a:linaro:lava:2015.04.1
  • Linaro » Lava » Version: 2015.05
    cpe:2.3:a:linaro:lava:2015.05
  • Linaro » Lava » Version: 2015.06
    cpe:2.3:a:linaro:lava:2015.06
  • Linaro » Lava » Version: 2015.07
    cpe:2.3:a:linaro:lava:2015.07
  • Linaro » Lava » Version: 2015.11
    cpe:2.3:a:linaro:lava:2015.11
  • Linaro » Lava » Version: 2015.12
    cpe:2.3:a:linaro:lava:2015.12
  • Linaro » Lava » Version: 2015.8
    cpe:2.3:a:linaro:lava:2015.8
  • Linaro » Lava » Version: 2015.8.1
    cpe:2.3:a:linaro:lava:2015.8.1
  • Linaro » Lava » Version: 2015.9
    cpe:2.3:a:linaro:lava:2015.9
  • Linaro » Lava » Version: 2016.11
    cpe:2.3:a:linaro:lava:2016.11
  • Linaro » Lava » Version: 2016.12
    cpe:2.3:a:linaro:lava:2016.12
  • Linaro » Lava » Version: 2016.2
    cpe:2.3:a:linaro:lava:2016.2
  • Linaro » Lava » Version: 2016.3
    cpe:2.3:a:linaro:lava:2016.3
  • Linaro » Lava » Version: 2016.4
    cpe:2.3:a:linaro:lava:2016.4
  • Linaro » Lava » Version: 2016.6
    cpe:2.3:a:linaro:lava:2016.6
  • Linaro » Lava » Version: 2016.8
    cpe:2.3:a:linaro:lava:2016.8
  • Linaro » Lava » Version: 2016.9
    cpe:2.3:a:linaro:lava:2016.9
  • Linaro » Lava » Version: 2017.1
    cpe:2.3:a:linaro:lava:2017.1
  • Linaro » Lava » Version: 2017.10
    cpe:2.3:a:linaro:lava:2017.10
  • Linaro » Lava » Version: 2017.11
    cpe:2.3:a:linaro:lava:2017.11
  • Linaro » Lava » Version: 2017.12
    cpe:2.3:a:linaro:lava:2017.12
  • Linaro » Lava » Version: 2017.2
    cpe:2.3:a:linaro:lava:2017.2
  • Linaro » Lava » Version: 2017.4
    cpe:2.3:a:linaro:lava:2017.4
  • Linaro » Lava » Version: 2017.5
    cpe:2.3:a:linaro:lava:2017.5
  • Linaro » Lava » Version: 2017.6
    cpe:2.3:a:linaro:lava:2017.6
  • Linaro » Lava » Version: 2017.7
    cpe:2.3:a:linaro:lava:2017.7
  • Linaro » Lava » Version: 2017.9
    cpe:2.3:a:linaro:lava:2017.9
  • Linaro » Lava » Version: 2018.1
    cpe:2.3:a:linaro:lava:2018.1
  • Linaro » Lava » Version: 2018.2
    cpe:2.3:a:linaro:lava:2018.2
  • Linaro » Lava » Version: 2018.4
    cpe:2.3:a:linaro:lava:2018.4
  • Linaro » Lava » Version: 2018.5
    cpe:2.3:a:linaro:lava:2018.5
  • Debian » Debian Linux » Version: 8.0
    cpe:2.3:o:debian:debian_linux:8.0
  • Debian » Debian Linux » Version: 9.0
    cpe:2.3:o:debian:debian_linux:9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved