Skip to content
Critical Published: May 22, 2018 Modified: Nov 21, 2024

CVE-2018-11325

9.8 CVSS Score Critical
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Export CVE-2018-11325 Data:
Share:
Link copied!

Description

An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.

CVSS Vector Details

Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Affected Software Configurations

  • a joomla joomla\! * * * * * * * *

Weaknesses (CWE)

  • CWE-209

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2000-1191 CVSS 0 Same weakness: CWE-209 CVE-2010-3332 CVSS 0 Same weakness: CWE-209 CVE-2017-7945 CVSS 0 Same weakness: CWE-209 CVE-2017-1370 CVSS 0 Same weakness: CWE-209 CVE-2018-2379 CVSS 0 Same weakness: CWE-209

CVE History Timeline

May 25, 2018 01:29 CVE Modified
May 27, 2018 01:29 CVE Modified
Jun 22, 2018 16:15 Initial Analysis
Oct 03, 2019 00:03 CWE Remap
May 14, 2024 04:55 CVE Modified
Nov 21, 2024 03:43 CVE Modified
← Back to CVE Tracker