Vulnerability CVE-2018-0949 - CERT Civis.Net

Vulnerability Name:

CVE-2018-0949 (CCN-145354)

Assigned:

2017-12-01

Published:

2018-07-10

Updated:

2019-10-03

Summary:

A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
5.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

4.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
3.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2018-0949

Source: BID
Type: Third Party Advisory, VDB Entry
104622

Source: CCN
Type: BID-104622
Microsoft Internet Explorer CVE-2018-0949 Security Bypass Vulnerability

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1041258

Source: XF
Type: UNKNOWN
ms-ie-cve20180949-sec-bypass(145354)

Source: CCN
Type: Microsoft Security TechCenter - July 2018
Internet Explorer Security Feature Bypass Vulnerability

Source: CONFIRM
Type: Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0949

Vulnerable Configuration:

Configuration 1:

cpe:/a:microsoft:internet_explorer:10:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:microsoft:internet_explorer:11:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_10:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1607:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1703:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1709:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1803:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_7:*:sp1:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8.1:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

OR cpe:/a:microsoft:ie:10:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x32:*

OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_7:-:sp1:-:*:-:-:x32:*

OR cpe:/o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8.1:-:-:-:*:-:-:x32:*

OR cpe:/o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:-:*:*:*:*:*:x32:*

OR cpe:/o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

Denotes that component is vulnerable