CVE-2018-5470
26.03.2018, 14:29
Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.Enginsight
| Vendor | Product | Version |
|---|---|---|
| philips | intellispace_portal | 8.0 |
| philips | intellispace_portal | 9.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-428 - Unquoted Search Path or ElementThe product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
- CWE-426 - Untrusted Search PathThe application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.
References