Details of VAR-201811-0477

ID

VAR-201811-0477

CVE

CVE-2018-8415

TITLE

plural Microsoft Windows Product and PowerShell Core Vulnerabilities to be tampered with

Trust: 0.8

sources: JVNDB: JVNDB-2018-010458

DESCRIPTION

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. plural Microsoft Windows Product and PowerShell Core Contains a vulnerability that can be tampered with. The vendor Microsoft PowerShell Has been disclosed as "Tampering Vulnerability".An attacker could execute code that is not logged. Microsoft Powershell is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions

Trust: 1.89

sources: NVD: CVE-2018-8415 // JVNDB: JVNDB-2018-010458 // BID: 105792

AFFECTED PRODUCTS

vendor:	microsoft	model:	powershell core	scope:	eq	version:	6.1	Trust: 2.7
vendor:	microsoft	model:	powershell core	scope:	eq	version:	6.0	Trust: 2.7
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	r2	Trust: 1.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	1703	Trust: 1.6
vendor:	microsoft	model:	windows 10	scope:	eq	version:	1709	Trust: 1.6
vendor:	microsoft	model:	windows 10	scope:	eq	version:	1803	Trust: 1.6
vendor:	microsoft	model:	windows 10	scope:	eq	version:	-	Trust: 1.6
vendor:	microsoft	model:	windows 10	scope:	eq	version:	1809	Trust: 1.6
vendor:	microsoft	model:	windows 8.1	scope:	eq	version:	-	Trust: 1.6
vendor:	microsoft	model:	windows 7	scope:	eq	version:	-	Trust: 1.6
vendor:	microsoft	model:	windows 10	scope:	eq	version:	1607	Trust: 1.6
vendor:	microsoft	model:	windows server 2016	scope:	eq	version:	1803	Trust: 1.0
vendor:	microsoft	model:	windows server 2019	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows server 2016	scope:	eq	version:	1709	Trust: 1.0
vendor:	microsoft	model:	windows server 2008	scope:	eq	version:	r2	Trust: 1.0
vendor:	microsoft	model:	windows server 2016	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows rt 8.1	scope:	eq	version:	-	Trust: 1.0
vendor:	microsoft	model:	windows 10	scope:	eq	version:	for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1607 for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1607 for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1703 for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1703 for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1709 for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1709 for 64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1709 for arm64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1803 for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1803 for arm64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1803 for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1809 for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1809 for arm64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1809 for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 7	scope:	eq	version:	for 32-bit systems sp1	Trust: 0.8
vendor:	microsoft	model:	windows 7	scope:	eq	version:	for x64-based systems sp1	Trust: 0.8
vendor:	microsoft	model:	windows 8.1	scope:	eq	version:	for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 8.1	scope:	eq	version:	for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows rt 8.1	scope:	-	version:	-	Trust: 0.8
vendor:	microsoft	model:	windows server	scope:	eq	version:	version 1709 (server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server	scope:	eq	version:	version 1803 (server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server 2008	scope:	eq	version:	r2 for x64-based systems sp1	Trust: 0.8
vendor:	microsoft	model:	windows server 2008	scope:	eq	version:	r2 for x64-based systems sp1 (server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	none	Trust: 0.8
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	(server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	r2 (server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server 2016	scope:	eq	version:	none	Trust: 0.8
vendor:	microsoft	model:	windows server 2016	scope:	eq	version:	(server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server 2019	scope:	eq	version:	none	Trust: 0.8
vendor:	microsoft	model:	windows server 2019	scope:	eq	version:	(server core installation)	Trust: 0.8
vendor:	microsoft	model:	windows server	scope:	eq	version:	20190	Trust: 0.3
vendor:	microsoft	model:	windows server	scope:	eq	version:	20160	Trust: 0.3
vendor:	microsoft	model:	windows server r2	scope:	eq	version:	20120	Trust: 0.3
vendor:	microsoft	model:	windows server	scope:	eq	version:	20120	Trust: 0.3
vendor:	microsoft	model:	windows server r2 for x64-based systems sp1	scope:	eq	version:	2008	Trust: 0.3
vendor:	microsoft	model:	windows server	scope:	eq	version:	18030	Trust: 0.3
vendor:	microsoft	model:	windows server	scope:	eq	version:	17090	Trust: 0.3
vendor:	microsoft	model:	windows rt	scope:	eq	version:	8.1	Trust: 0.3
vendor:	microsoft	model:	windows for x64-based systems	scope:	eq	version:	8.10	Trust: 0.3
vendor:	microsoft	model:	windows for 32-bit systems	scope:	eq	version:	8.10	Trust: 0.3
vendor:	microsoft	model:	windows for x64-based systems sp1	scope:	eq	version:	7	Trust: 0.3
vendor:	microsoft	model:	windows for 32-bit systems sp1	scope:	eq	version:	7	Trust: 0.3
vendor:	microsoft	model:	windows version for x64-based systems	scope:	eq	version:	1018090	Trust: 0.3
vendor:	microsoft	model:	windows version for arm64-based systems	scope:	eq	version:	1018090	Trust: 0.3
vendor:	microsoft	model:	windows version for 32-bit systems	scope:	eq	version:	1018090	Trust: 0.3
vendor:	microsoft	model:	windows version for x64-based systems	scope:	eq	version:	1018030	Trust: 0.3
vendor:	microsoft	model:	windows version for arm64-based systems	scope:	eq	version:	1018030	Trust: 0.3
vendor:	microsoft	model:	windows version for 32-bit systems	scope:	eq	version:	1018030	Trust: 0.3
vendor:	microsoft	model:	windows version for x64-based systems	scope:	eq	version:	1017090	Trust: 0.3
vendor:	microsoft	model:	windows version for arm64-based systems	scope:	eq	version:	1017090	Trust: 0.3
vendor:	microsoft	model:	windows version for 32-bit systems	scope:	eq	version:	1017090	Trust: 0.3
vendor:	microsoft	model:	windows version for x64-based systems	scope:	eq	version:	1017030	Trust: 0.3
vendor:	microsoft	model:	windows version for 32-bit systems	scope:	eq	version:	1017030	Trust: 0.3
vendor:	microsoft	model:	windows version for x64-based systems	scope:	eq	version:	1016070	Trust: 0.3
vendor:	microsoft	model:	windows version for 32-bit systems	scope:	eq	version:	1016070	Trust: 0.3
vendor:	microsoft	model:	windows for x64-based systems	scope:	eq	version:	100	Trust: 0.3
vendor:	microsoft	model:	windows for 32-bit systems	scope:	eq	version:	100	Trust: 0.3

sources: BID: 105792 // JVNDB: JVNDB-2018-010458 // CNNVD: CNNVD-201811-358 // NVD: CVE-2018-8415

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-8415
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-8415
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201811-358
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2018-8415
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

nvd@nist.gov:	CVE-2018-8415
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: JVNDB: JVNDB-2018-010458 // CNNVD: CNNVD-201811-358 // NVD: CVE-2018-8415

PROBLEMTYPE DATA

problemtype:

CWE-94

Trust: 1.8

sources: JVNDB: JVNDB-2018-010458 // NVD: CVE-2018-8415

THREAT TYPE

local

Trust: 0.9

sources: BID: 105792 // CNNVD: CNNVD-201811-358

TYPE

code injection

Trust: 0.6

sources: CNNVD: CNNVD-201811-358

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-010458

PATCH

title:	CVE-2018-8415 \| Microsoft PowerShell Tampering Vulnerability	url:	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8415	Trust: 0.8
title:	CVE-2018-8415 \| Microsoft PowerShell の改ざんの脆弱性	url:	https://portal.msrc.microsoft.com/ja-jp/security-guidance/advisory/CVE-2018-8415	Trust: 0.8
title:	Microsoft PowerShell Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86766	Trust: 0.6

sources: JVNDB: JVNDB-2018-010458 // CNNVD: CNNVD-201811-358

EXTERNAL IDS

db:	NVD	id:	CVE-2018-8415	Trust: 2.7
db:	BID	id:	105792	Trust: 1.9
db:	SECTRACK	id:	1042108	Trust: 1.0
db:	JVNDB	id:	JVNDB-2018-010458	Trust: 0.8
db:	CNNVD	id:	CNNVD-201811-358	Trust: 0.6

sources: BID: 105792 // JVNDB: JVNDB-2018-010458 // CNNVD: CNNVD-201811-358 // NVD: CVE-2018-8415

REFERENCES

url:	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2018-8415	Trust: 1.9
url:	http://www.securityfocus.com/bid/105792	Trust: 1.6
url:	http://www.securitytracker.com/id/1042108	Trust: 1.0
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-8415	Trust: 0.8
url:	https://www.ipa.go.jp/security/ciadr/vul/20181114-ms.html	Trust: 0.8
url:	http://www.jpcert.or.jp/at/2018/at180046.html	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-8415	Trust: 0.8
url:	http://www.microsoft.com	Trust: 0.3

sources: BID: 105792 // JVNDB: JVNDB-2018-010458 // CNNVD: CNNVD-201811-358 // NVD: CVE-2018-8415

CREDITS

Amirreza Niakanlahiji (@DissectMalware) of University of North Carolina at Charlotte and Amirreza Niakanlahiji of University of North Carolina at Charlotte

Trust: 0.9

sources: BID: 105792 // CNNVD: CNNVD-201811-358

SOURCES

db:	BID	id:	105792
db:	JVNDB	id:	JVNDB-2018-010458
db:	CNNVD	id:	CNNVD-201811-358
db:	NVD	id:	CVE-2018-8415

LAST UPDATE DATE

2024-08-14T13:55:41.951000+00:00

SOURCES UPDATE DATE

db:	BID	id:	105792	date:	2018-11-13T00:00:00
db:	JVNDB	id:	JVNDB-2018-010458	date:	2018-12-14T00:00:00
db:	CNNVD	id:	CNNVD-201811-358	date:	2018-11-16T00:00:00
db:	NVD	id:	CVE-2018-8415	date:	2018-12-13T18:13:48.827

SOURCES RELEASE DATE

db:	BID	id:	105792	date:	2018-11-13T00:00:00
db:	JVNDB	id:	JVNDB-2018-010458	date:	2018-12-14T00:00:00
db:	CNNVD	id:	CNNVD-201811-358	date:	2018-11-14T00:00:00
db:	NVD	id:	CVE-2018-8415	date:	2018-11-14T01:29:00.380