[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmmwE2m5UCtQmtpZswk5f8Hlo29CEMAg4WBxGB5D7eUg":3,"g5a-risk:CVE-2018-12015":260},{"success":4,"data":5,"meta":258},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":95,"references":96,"referencesCount":147,"weaknesses":148,"weaknessesCount":157,"isActivelyExploited":158,"cisaInfo":15,"otxData":15,"relatedBlogPosts":159,"seoMetadata":160,"configurations":185,"relatedVendorCves":242,"notableEvents":243},"CVE-2018-12015","What is CVE-2018-12015?","In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.","In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, ...","2018-06-07T13:29:00.24","2020-08-24T17:37:01.14",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:P","PARTIAL",6.4,"MEDIUM",10,4.9,0.0731,[39,39,39,39,39,39,39],"High",[43,48,51,54,57,60,65,68,72,77,81,86,89,92],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"17.10","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":58,"criteria":59,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":66,"criteria":67,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":69,"product":69,"version":70,"criteria":71,"vulnerable":4},"perl","*","cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",{"vendor":73,"product":74,"version":75,"criteria":76,"vulnerable":4},"archive\\","\\","tar_project","cpe:2.3:a:archive\\:\\:tar_project:archive\\:\\:tar:*:*:*:*:*:perl:*:*",{"vendor":78,"product":79,"version":70,"criteria":80,"vulnerable":4},"apple","mac_os_x","cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",{"vendor":82,"product":83,"version":84,"criteria":85,"vulnerable":4},"netapp","data_ontap_edge","-","cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",{"vendor":82,"product":87,"version":84,"criteria":88,"vulnerable":4},"oncommand_workflow_automation","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",{"vendor":82,"product":90,"version":84,"criteria":91,"vulnerable":4},"snap_creator_framework","cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*",{"vendor":82,"product":93,"version":84,"criteria":94,"vulnerable":4},"snapdrive","cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*",14,[97,103,108,112,116,121,124,129,133,137,140,143],{"url":98,"source":99,"tags":100},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FMar\u002F49","Seclists",[101,102],"Mailing List","Third Party Advisory",{"url":104,"source":105,"tags":106},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104423","Securityfocus",[102,107],"VDB Entry",{"url":109,"source":110,"tags":111},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041048","Securitytracker",[102,107],{"url":113,"source":114,"tags":115},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2097","Red Hat",[],{"url":117,"source":118,"tags":119},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=900834","Debian",[120,101,102],"Exploit",{"url":122,"source":99,"tags":123},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMar\u002F42",[101,102],{"url":125,"source":126,"tags":127},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20180927-0001\u002F","Netapp",[128,102],"Patch",{"url":130,"source":131,"tags":132},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT209600","Apple",[102],{"url":134,"source":135,"tags":136},"https:\u002F\u002Fusn.ubuntu.com\u002F3684-1\u002F","Ubuntu",[102],{"url":138,"source":135,"tags":139},"https:\u002F\u002Fusn.ubuntu.com\u002F3684-2\u002F",[102],{"url":141,"source":118,"tags":142},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4226",[102],{"url":144,"source":145,"tags":146},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html","Oracle",[],12,[149],{"id":150,"name":151,"description":152,"extendedDescription":153,"status":154,"abstraction":155,"structure":156},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,false,[],{"title":161,"metaDescription":162,"keywords":163,"canonicalUrl":164,"structuredData":165},"What is CVE-2018-12015? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12015, a high severity cyber security vulnerability from 2018. In Perl through 5.26.2, the Archive::Tar module allows remo...","CVE-2018-12015, CVE-2018-12015 vulnerability, CVE-2018-12015 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, canonical security, debian security, perl security, archive\\ security, apple security, ubuntu_linux vulnerability, debian_linux vulnerability, perl vulnerability","\u002Fwhat-is\u002Fcve-2018-12015",{"@context":166,"@type":167,"headline":161,"description":162,"datePublished":10,"dateModified":11,"author":168,"publisher":172,"about":176,"mainEntityOfPage":180,"articleSection":183,"keywords":184},"https:\u002F\u002Fschema.org","TechArticle",{"@type":169,"name":170,"url":171},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":169,"name":170,"url":171,"logo":173},{"@type":174,"url":175},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":177,"name":6,"description":178,"additionalType":179},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":181,"@id":182},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12015","Cybersecurity","CVE-2018-12015, CVE-2018-12015 vulnerability, CVE-2018-12015 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[186,201,209,216,223,230],{"Operator":15,"Negate":15,"Nodes":187},[188],{"Operator":189,"Negate":15,"CPEMatch":190},"OR",[191,193,195,197,199],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":198,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9070C9D8-A14A-467F-8253-33B966C16886",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":200,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Operator":15,"Negate":15,"Nodes":202},[203],{"Operator":189,"Negate":15,"CPEMatch":204},[205,207],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":206,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":208,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":210},[211],{"Operator":189,"Negate":15,"CPEMatch":212},[213],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":214,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":215},"FA33F373-89C1-4FAD-9B80-7B2BD4388162","5.26.2",{"Operator":15,"Negate":15,"Nodes":217},[218],{"Operator":189,"Negate":15,"CPEMatch":219},[220],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":222},"52784FCD-EC91-4EF7-998B-E28F95B99B7D","2.28",{"Operator":15,"Negate":15,"Nodes":224},[225],{"Operator":189,"Negate":15,"CPEMatch":226},[227],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":228,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":229,"VersionEndIncluding":15},"09CDBB72-2A0D-4321-BA1F-4FB326A5646A","10.14.4",{"Operator":15,"Negate":15,"Nodes":231},[232],{"Operator":189,"Negate":15,"CPEMatch":233},[234,236,238,240],{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":235,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":237,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5735E553-9731-4AAC-BCFF-989377F817B3",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":239,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9F4754FB-E3EB-454A-AB1A-AE3835C5350C",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":241,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"61D7EF01-F618-497F-9375-8003CEA3D380",[],[244,251],{"id":245,"eventType":246,"eventTime":247,"details":248,"label":249,"color":250},"aba9dbf2-945a-4ea6-abc0-561597fed463","LOW_EPSS_DELTA","2025-07-13T04:05:58.18509+00:00","Daily EPSS score decreased by 0.144 on 2023-12-30","EPSS Score Decreased","green",{"id":252,"eventType":253,"eventTime":254,"details":255,"label":256,"color":257},"beeb3bf0-90b9-48a6-a849-42460344632c","HIGH_EPSS_DELTA","2025-11-19T04:06:53.408225+00:00","Daily EPSS score increased by 0.429 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":259,"version":32},1792260618482,{"score":261,"band":262,"action":263,"scoredAt":264},49,"Medium","Plan remediation","2026-10-16T06:44:12.462585+00:00"]