Web application abuses : PHP Security Bypass Vulnerability May18 (Windows)

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.813161

Kategorie: Web application abuses

Titel: PHP Security Bypass Vulnerability May18 (Windows)

Zusammenfassung: PHP is prone to a security bypass vulnerability.

Beschreibung: Summary:
PHP is prone to a security bypass vulnerability.

Vulnerability Insight:
The flaw exists as the dumpable FPM child
processes allow bypassing opcache access controls

Vulnerability Impact:
Successful exploitation will allow an attacker
to bypass security restrictions and access sensitive configuration data for
other accounts directly in the PHP worker process's memory.

Affected Software/OS:
PHP versions prior to 5.6.35,

PHP versions 7.2.x prior to 7.2.4,

PHP versions 7.0.x prior to 7.0.29,

PHP versions 7.1.x prior to 7.1.16 on Windows.

Solution:
Update to version 7.2.4 or 7.0.29 or
5.6.35 or 7.1.16 or later. Please see the references for more information.

CVSS Score:
1.9

CVSS Vector:
AV:L/AC:M/Au:N/C:P/I:N/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2018-10545

Copyright Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.813161
Kategorie:	Web application abuses
Titel:	PHP Security Bypass Vulnerability May18 (Windows)
Zusammenfassung:	PHP is prone to a security bypass vulnerability.
Beschreibung:	Summary: PHP is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists as the dumpable FPM child processes allow bypassing opcache access controls Vulnerability Impact: Successful exploitation will allow an attacker to bypass security restrictions and access sensitive configuration data for other accounts directly in the PHP worker process's memory. Affected Software/OS: PHP versions prior to 5.6.35, PHP versions 7.2.x prior to 7.2.4, PHP versions 7.0.x prior to 7.0.29, PHP versions 7.1.x prior to 7.1.16 on Windows. Solution: Update to version 7.2.4 or 7.0.29 or 5.6.35 or 7.1.16 or later. Please see the references for more information. CVSS Score: 1.9 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10545
Copyright	Copyright (C) 2018 Greenbone Networks GmbH