CVE-2018-20221 - CVE House
Back to Database
Status published High CVE-2018-20221

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable...

Vulnerability Description

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20221

Credits & Attribution

No credits recorded in the NVD database.

References

More from deltek

View All →
CVE-2019-12314
Deltek Maconomy 2.2.5 is prone to local file inclusion via...
Critical 9.8
CVE-2018-18251
Deltek Vision 7.x before 7.6 permits the execution of any...
Critical 9.8

Affected Vendor

Affected Software

ajera
Vulnerable Versions:
0

Timeline

Official Publish: March 17th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.