[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBdrcX8BCuiQOFhIUe47JsDMqVEFKYtrQSATZBEArhgo":3,"g5a-risk:CVE-2018-20193":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":52,"weaknesses":66,"weaknessesCount":75,"isActivelyExploited":76,"cisaInfo":15,"otxData":15,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":113,"notableEvents":114},"CVE-2018-20193","What is CVE-2018-20193?","Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC) allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 (build 9627) 4.2 Release (build 7631). This occurs because appropriate controls are not performed. Specifically, it is possible for a readonly user to change the administrator user password by making a local copy of the \u002Fdana-admin\u002Fuser\u002Fupdate.cgi page, changing the \"user\" value, and saving the changes.","Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC) allow privilege e...","2018-12-21T23:29:00.823","2019-10-03T00:03:26.223",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,"MEDIUM",8,2.9,0.01297,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"pulsesecure","secure_access_series_ssl_vpn_sa-4000","4.2","cpe:2.3:a:pulsesecure:secure_access_series_ssl_vpn_sa-4000:4.2:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"5.1r5","cpe:2.3:a:pulsesecure:secure_access_series_ssl_vpn_sa-4000:5.1r5:*:*:*:*:*:*:*",2,[54,61],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2018\u002FDec\u002F37","Seclists",[58,59,60],"Exploit","Mailing List","Third Party Advisory",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106289","Securityfocus",[60,65],"VDB Entry",[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2018-20193? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-20193, a high severity cyber security vulnerability from 2018. Certain Secure Access SA Series SSL VPN products (originall...","CVE-2018-20193, CVE-2018-20193 vulnerability, CVE-2018-20193 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, pulsesecure security, secure_access_series_ssl_vpn_sa-4000 vulnerability","\u002Fwhat-is\u002Fcve-2018-20193",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-20193","Cybersecurity","CVE-2018-20193, CVE-2018-20193 vulnerability, CVE-2018-20193 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":15,"Negate":15,"Nodes":105},[106],{"Operator":107,"Negate":15,"CPEMatch":108},"OR",[109,111],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":110,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"68854423-B469-4C6C-A5DF-60B1677C537D",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":112,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0B204D0F-A0EA-4FF9-B778-839BADCD452F",[],[],{"lastModified":11,"cacheTime":116,"version":32},1792244234303,{"score":118,"band":119,"action":120,"scoredAt":121},53,"Medium","Plan remediation","2026-10-16T06:45:18.300614+00:00"]