Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2018-20316
CVE-2018-20316:
NixOS vulnerability analysis and mitigation
Overview
CVE-2018-20316 is a vulnerability affecting Foxit PhantomPDF 9 (ML) (MSI) version 9.4. The vulnerability was assigned a CVSS 3.0 score of 8.1, indicating a high severity level (ManageEngine VMP).
Technical details
The vulnerability has a CVSS 3.0 base score of 8.1 with the following vector: I:H/AV:N/AC:H/S:U/PR:N/A:H/UI:N/C:H, suggesting high impact, network accessibility, high attack complexity, and high confidentiality impact (ManageEngine VMP).
Impact
Based on the CVSS score and vector, the vulnerability could potentially lead to high impact on system confidentiality and availability (ManageEngine VMP).
Exploitability
The vulnerability requires network access but has high attack complexity, with no privileges required and no user interaction needed for exploitation, as indicated by the CVSS vector (ManageEngine VMP).
Mitigation and workarounds
The solution provided is to update to FoxitPhantomPDF975_L10N_Setup_Website.msi (ManageEngine VMP).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management