[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWB-ycHu0kzJsGVd8UlCYwpGEUjX3N9YSobBspdWmOFM":3,"g5a-risk:CVE-2018-13054":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":72,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":15,"otxData":15,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":126,"notableEvents":127},"CVE-2018-13054","What is CVE-2018-13054?","An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME\u002F.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.","An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other user...","2018-07-02T14:29:00.213","2018-09-04T17:02:30.11",8.1,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.2,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:P","MEDIUM","PARTIAL",5.8,8.6,4.9,0.02201,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"linuxmint","cinnamon","*","cpe:2.3:a:linuxmint:cinnamon:*:*:*:*:*:*:*:*",2,[56,63,67],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1083067","Suse",[60,61,62],"Issue Tracking","Patch","Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002Flinuxmint\u002FCinnamon\u002Fpull\u002F7683","GitHub",[61,62],{"url":68,"source":69,"tags":70},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F07\u002Fmsg00011.html","Debian",[71,62],"Mailing List",3,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2018-13054? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-13054, a high severity cyber security vulnerability from 2018. An issue was discovered in Cinnamon 1.9.2 through 3.8.6. Th...","CVE-2018-13054, CVE-2018-13054 vulnerability, CVE-2018-13054 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, debian security, linuxmint security, debian_linux vulnerability, cinnamon vulnerability","\u002Fwhat-is\u002Fcve-2018-13054",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-13054","Cybersecurity","CVE-2018-13054, CVE-2018-13054 vulnerability, CVE-2018-13054 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,118],{"Operator":15,"Negate":15,"Nodes":112},[113],{"Operator":114,"Negate":15,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":117,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":15,"Negate":15,"Nodes":119},[120],{"Operator":114,"Negate":15,"CPEMatch":121},[122],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":123,"VersionStartExcluding":15,"VersionStartIncluding":124,"VersionEndExcluding":15,"VersionEndIncluding":125},"A0EA609F-9DEE-4ED9-BA59-C26ACFB2E2B8","1.9.2","3.8.6",[],[],{"lastModified":11,"cacheTime":129,"version":33},1792370464089,{"score":131,"band":132,"action":133,"scoredAt":134},46,"Medium","Plan remediation","2026-10-16T06:44:23.394924+00:00"]