Back
CVE-2018-18406
CRITICAL
An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerability when a new Best Practices Report is saved using a special payload inside the xml input field. The XXE vulnerability is blind since the response doesn't directly display a requested file, but rather returns it inside the name data field when the report is saved. An attacker is able to view restricted operating system files. This issue affects all types of users: administrators or normal users.
Published: Jun 19, 2019
Modified: Jun 17, 2026
CWE-611
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| tufin | securetrack | 18.1 |
GitHub Security Advisory GHSA-347g-9rp4-26rw
An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit...
References (6)
- https://forum.tufin.com/support/kc/latest/ Vendor Advisory
- https://www.exploit-db.com/exploits/45808 Exploit, Third Party Advisory, VDB Entry
- https://www.tufin.com/ Vendor Advisory
- https://forum.tufin.com/support/kc/latest/ Vendor Advisory
- https://www.exploit-db.com/exploits/45808 Exploit, Third Party Advisory, VDB Entry
- https://www.tufin.com/ Vendor Advisory
Risk Scores
CVSS Score
9.9 / 10
EPSS Score
2.03%
Top 20% most likely to be exploited
Threat Score
40.2 / 100
Data Sources
NVD
EPSS
GitHub