VULNERABILITY INTELLIGENCE

CVE-2018-14836

CVSS score6.5 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2018-08-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references