CVE-2018-18256

HIGH 7.8CVE-2018-18256 · Published 15/03/2019 · updated 17/06/2026

In short

CVE-2018-18256 is a HIGH (CVSS 7.8) vulnerability affecting access manager (capmon).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
access manager capmon	`= 5.4.1.1005`	No fix yet

Description

An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher.

References

improsec.com/tech-blog/cam1 · Exploit

More vulnerabilities in access manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free