[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG3rR1IbtMOimHe09AmkIJ0gSld0IysBwpsUSAd98cWY":3,"g5a-risk:CVE-2018-0486":143},{"success":4,"data":5,"meta":141},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":58,"references":59,"referencesCount":82,"weaknesses":83,"weaknessesCount":92,"isActivelyExploited":93,"cisaInfo":15,"otxData":15,"relatedBlogPosts":94,"seoMetadata":95,"configurations":120,"relatedVendorCves":139,"notableEvents":140},"CVE-2018-0486","What is CVE-2018-0486?","Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.","Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of use...","2018-01-13T18:29:00.207","2018-02-15T18:24:28.347",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",3.9,2.5,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,10,4.9,0.01531,[38,38,38,38,38,38,38],"Medium",[42,47,52,55],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"shibboleth","xmltooling-c","*","cpe:2.3:a:shibboleth:xmltooling-c:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","7.0","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",4,[60,66,71,74,79],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040177","Securitytracker",[64,65],"Third Party Advisory","VDB Entry",{"url":67,"source":68,"tags":69},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F01\u002Fmsg00016.html","Debian",[70,64],"Mailing List",{"url":72,"source":68,"tags":73},"https:\u002F\u002Flists.debian.org\u002Fdebian-security-announce\u002F2018\u002Fmsg00007.html",[70,64],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fshibboleth.net\u002Fcommunity\u002Fadvisories\u002Fsecadv_20180112.txt","Shibboleth",[78],"Vendor Advisory",{"url":80,"source":68,"tags":81},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4085",[64],5,[84],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":96,"metaDescription":97,"keywords":98,"canonicalUrl":99,"structuredData":100},"What is CVE-2018-0486? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-0486, a medium severity cyber security vulnerability from 2018. Shibboleth XMLTooling-C before 1.6.3, as used in Shibbolet...","CVE-2018-0486, CVE-2018-0486 vulnerability, CVE-2018-0486 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, shibboleth security, debian security, xmltooling-c vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-0486",{"@context":101,"@type":102,"headline":96,"description":97,"datePublished":10,"dateModified":11,"author":103,"publisher":107,"about":111,"mainEntityOfPage":115,"articleSection":118,"keywords":119},"https:\u002F\u002Fschema.org","TechArticle",{"@type":104,"name":105,"url":106},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":104,"name":105,"url":106,"logo":108},{"@type":109,"url":110},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":112,"name":6,"description":113,"additionalType":114},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":116,"@id":117},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-0486","Cybersecurity","CVE-2018-0486, CVE-2018-0486 vulnerability, CVE-2018-0486 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[121,129],{"Operator":15,"Negate":15,"Nodes":122},[123],{"Operator":124,"Negate":15,"CPEMatch":125},"OR",[126],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":127,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":128,"VersionEndIncluding":15},"81B8A683-A7C2-4C3E-9A32-A38BE923A470","1.6.3",{"Operator":15,"Negate":15,"Nodes":130},[131],{"Operator":124,"Negate":15,"CPEMatch":132},[133,135,137],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16F59A04-14CF-49E2-9973-645477EA09DA",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":142,"version":32},1792357976112,{"score":144,"band":145,"action":146,"scoredAt":147},24,"Low","Monitor","2026-10-16T06:43:13.103461+00:00"]