CVE-2018-20221

HIGH

Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-20221 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBAjera Timesheets 9.10.16 - Deserialization of Untrusted DataExploitDB exploitby Anthony ColeNot analyzed1 file
ExploitDB
PoC details

References

3