[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP5bIY2sOLTpW457CikwyyUPGnfHKgBIh4HThujmdCWU":3,"g5a-risk:CVE-2018-0422":191},{"success":4,"data":5,"meta":189},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":74,"references":75,"referencesCount":91,"weaknesses":92,"weaknessesCount":101,"isActivelyExploited":102,"cisaInfo":15,"otxData":15,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":187,"notableEvents":188},"CVE-2018-0422","What is CVE-2018-0422?","A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability is due to folder permissions that grant a user the permission to read, write, and execute files in the Webex folders. An attacker could exploit this vulnerability to write malicious files to the Webex client directory, affecting all other users of the targeted device. A successful exploit could allow a user to execute commands with elevated privileges. Attacks on single-user systems are less likely to occur, as the attack must be carried out by the user on the user's own system. Multiuser systems have a higher risk of exploitation because folder permissions have an impact on all users of the device. For an attacker to exploit this vulnerability successfully, a second user must execute the locally installed malicious file to allow remote code execution to occur.","A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored fi...","2018-10-05T14:29:00.73","2019-10-03T00:03:26.223",7.3,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH",1.3,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":34,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","NONE","COMPLETE",6.9,3.4,10,0.0107,[40,40,40,40,40,40,40],"High",[44,49,52,55,60,63,65,68,71],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"cisco","webex_meetings_online","*","cpe:2.3:a:cisco:webex_meetings_online:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"t31.20","cpe:2.3:a:cisco:webex_meetings_online:t31.20:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"t31.20.2","cpe:2.3:a:cisco:webex_meetings_online:t31.20.2:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",{"vendor":45,"product":61,"version":47,"criteria":62,"vulnerable":4},"webex_meetings_server","cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*",{"vendor":45,"product":61,"version":21,"criteria":64,"vulnerable":4},"cpe:2.3:a:cisco:webex_meetings_server:3.0:mr1:*:*:*:*:*:*",{"vendor":45,"product":66,"version":47,"criteria":67,"vulnerable":4},"webex_business_suite_32","cpe:2.3:a:cisco:webex_business_suite_32:*:*:*:*:*:*:*:*",{"vendor":45,"product":69,"version":47,"criteria":70,"vulnerable":4},"webex_business_suite_33","cpe:2.3:a:cisco:webex_business_suite_33:*:*:*:*:*:*:*:*",{"vendor":45,"product":72,"version":47,"criteria":73,"vulnerable":4},"webex_business_suite_31","cpe:2.3:a:cisco:webex_business_suite_31:*:*:*:*:*:*:*:*",9,[76,82,86],{"url":77,"source":78,"tags":79},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105281","Securityfocus",[80,81],"Third Party Advisory","VDB Entry",{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041681","Securitytracker",[80,81],{"url":87,"source":88,"tags":89},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20180905-webex-pe","Cisco",[90],"Vendor Advisory",3,[93],{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":100},"CWE-732","Incorrect Permission Assignment for Critical Resource","The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.","Draft","Class","Simple",1,false,[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2018-0422? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-0422, a high severity cyber security vulnerability from 2018. A vulnerability in the folder permissions of Cisco Webex Mee...","CVE-2018-0422, CVE-2018-0422 vulnerability, CVE-2018-0422 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, cisco security, microsoft security, webex_meetings_online vulnerability, windows vulnerability, webex_meetings_server vulnerability, webex_business_suite_32 vulnerability, webex_business_suite_33 vulnerability","\u002Fwhat-is\u002Fcve-2018-0422",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-0422","Cybersecurity","CVE-2018-0422, CVE-2018-0422 vulnerability, CVE-2018-0422 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130,147,158,168,178],{"Operator":131,"Negate":15,"Nodes":132},"AND",[133,143],{"Operator":134,"Negate":15,"CPEMatch":135},"OR",[136,139,141],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":137,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":138,"VersionEndIncluding":15},"11750DBC-3256-4F47-A1AB-6F8E76BDEB19","1.3.37",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A73EC003-9FE9-4F41-903A-2DB176047C83",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2C1FAAB9-B854-45B2-895D-E6E2476B9BD5",{"Operator":134,"Negate":15,"CPEMatch":144},[145],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A2572D17-1DE6-457B-99CC-64AFD54487EA",{"Operator":131,"Negate":15,"Nodes":148},[149,155],{"Operator":134,"Negate":15,"CPEMatch":150},[151,153],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":152,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":21},"81BA54A6-1EEB-4C69-903A-F25A4C48132A",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"83CB4EE4-B77F-47F5-9226-56ACB06B8103",{"Operator":134,"Negate":15,"CPEMatch":156},[157],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},{"Operator":131,"Negate":15,"Nodes":159},[160,165],{"Operator":134,"Negate":15,"CPEMatch":161},[162],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":164,"VersionEndIncluding":15},"8686EE85-1A08-42BE-9852-88C365039193","32.15.20",{"Operator":134,"Negate":15,"CPEMatch":166},[167],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},{"Operator":131,"Negate":15,"Nodes":169},[170,175],{"Operator":134,"Negate":15,"CPEMatch":171},[172],{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":174,"VersionEndIncluding":15},"1B15D9AA-737C-453F-A395-FBAE45B74977","33.4",{"Operator":134,"Negate":15,"CPEMatch":176},[177],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},{"Operator":131,"Negate":15,"Nodes":179},[180,184],{"Operator":134,"Negate":15,"CPEMatch":181},[182],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":183,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4D30B199-F782-44FC-B16B-52318AAB6089",{"Operator":134,"Negate":15,"CPEMatch":185},[186],{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},[],[],{"lastModified":11,"cacheTime":190,"version":32},1792377073670,{"score":192,"band":193,"action":194,"scoredAt":195},46,"Medium","Plan remediation","2026-10-16T06:44:56.364603+00:00"]