National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2018-14780

Change History

Initial Analysis - 10/22/2018 2:08:44 PM

Action Type Old Value New Value
Changed Reference Type
http://www.openwall.com/lists/oss-security/2018/08/14/2 No Types Assigned
http://www.openwall.com/lists/oss-security/2018/08/14/2 Mailing List, Third Party Advisory
Changed Reference Type
https://www.x41-dsec.de/lab/advisories/x41-2018-001-Yubico-Piv/ No Types Assigned
https://www.x41-dsec.de/lab/advisories/x41-2018-001-Yubico-Piv/ Third Party Advisory
Changed Reference Type
https://www.yubico.com/support/security-advisories/ysa-2018-03/ No Types Assigned
https://www.yubico.com/support/security-advisories/ysa-2018-03/ Vendor Advisory
Added CWE
CWE-125
Added CVSS V2
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Added CVSS V3
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Added CPE Configuration
OR
     *cpe:2.3:a:yubico:piv_manager:*:*:*:*:*:*:*:* versions up to (excluding) 1.4.2
     *cpe:2.3:a:yubico:piv_manager:1.4.2:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_manager:1.4.2b:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_manager:1.4.2c:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_manager:1.4.2d:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_manager:1.4.2e:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_manager:1.4.2f:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_manager:1.4.2g:*:*:*:*:*:*:*
     *cpe:2.3:a:yubico:piv_tool:*:*:*:*:*:*:*:* versions up to (excluding) 1.6.0
     *cpe:2.3:a:yubico:smart_card_minidriver:*:*:*:*:*:*:*:* versions up to (including) 3.7.3.160