CVE-2018-15658 - CVE House
Back to Database
Status published High CVE-2018-15658

An issue was discovered in 42Gears SureMDM before 2018-11-27. By...

Vulnerability Description

An issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at /console/ConsolePage/Master.html, an attacker is able to see the markup that would be presented to an authenticated user. This is caused by the session validation occurring after the initial markup is loaded. This results in a list of unprotected API endpoints that disclose call logs, SMS logs, and user-account data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15658

Credits & Attribution

No credits recorded in the NVD database.

References

More from 42gears

View All →
CVE-2023-2335
Plaintext Password in Registry
Medium 6.5
CVE-2018-15659
An issue was discovered in 42Gears SureMDM before 2018-11-27, related...
Medium 6.5
CVE-2018-15657
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27...
High 7.3
CVE-2018-15656
An issue was discovered in the registration API endpoint in...
High 7.5
CVE-2018-15655
An issue was discovered in 42Gears SureMDM before 2018-11-27, related...
Medium 6.5

Affected Vendor

Affected Software

suremdm
Vulnerable Versions:
0

Timeline

Official Publish: February 5th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.