« Volver al listado

CVE-2018-13014

Estado: ModificadaAlta (7.8)—

Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Safensoft — Enterprise SuiteSafensoft — SyswatchSafensoft — Tpsecure

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-13014",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-06-29T15:29:00.367",
  "references": [
    {
      "url": "http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings."
    },
    {
      "lang": "es",
      "value": "Almacenar la contraseña en formato recuperable en safensec.com (servicio SysWatch) en SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure y SoftControl/SafenSoft Enterprise Suite en versiones anteriores a la 4.4.2 permite al atacante local restaurar la contraseña SysWatch desde la base de datos de configuración y modificar la configuración del programa."
    }
  ],
  "lastModified": "2026-06-17T01:38:42.587",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:safensoft:enterprise_suite:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADE48A52-8384-4F2E-9E12-0D4D1D54FCFD",
              "versionEndExcluding": "4.4.2"
            },
            {
              "criteria": "cpe:2.3:a:safensoft:syswatch:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B6ADD1F-DDE6-45E5-BA0D-74661AA00F17",
              "versionEndExcluding": "4.4.2"
            },
            {
              "criteria": "cpe:2.3:a:safensoft:tpsecure:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0CD8170-4CC4-4F46-88C4-0C4731103581",
              "versionEndExcluding": "4.4.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}