VULNERABILITY INTELLIGENCE

CVE-2017-18045

CVSS score9.8 CRITICAL
EPSS probability1.39%
CISA KEVNot currently listed
Published2018-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.

Primary references