Language:
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it is different from CVSS.
VPR Score: 6.7
https://cwe.mitre.org/data/definitions/125.html
https://cwe.mitre.org/data/definitions/79.html
https://access.redhat.com/errata/RHSA-2020:1112
https://access.redhat.com/security/cve/CVE-2018-10547
https://access.redhat.com/security/cve/CVE-2018-5712
https://access.redhat.com/security/cve/CVE-2018-7584
https://access.redhat.com/security/cve/CVE-2019-9024
https://bugzilla.redhat.com/1685404
https://bugzilla.redhat.com/1535251
Severity: High
ID: 135040
File Name: redhat-RHSA-2020-1112.nasl
Version: 1.3
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 3/31/2020
Updated: 11/19/2020
Dependencies: 12634
Risk Factor: High
VPR Score: 6.7
CVSS Score Source: CVE-2018-7584
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Temporal Vector: CVSS2#E:POC/RL:OF/RC:C
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CPE: cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*, cpe:2.3:o:redhat:enterprise_linux:7:*:client:*:*:*:*:*, cpe:2.3:o:redhat:enterprise_linux:7:*:server:*:*:*:*:*, cpe:2.3:o:redhat:enterprise_linux:7:*:workstation:*:*:*:*:*, cpe:2.3:o:redhat:enterprise_linux:7:*:computenode:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-ldap:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-mysql:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-odbc:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-pgsql:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-gd:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-mbstring:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-snmp:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-xmlrpc:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-bcmath:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-cli:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-common:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-dba:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-pdo:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-soap:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-xml:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-embedded:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-enchant:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-fpm:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-intl:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-process:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-pspell:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-recode:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:php-mysqlnd:*:*:*:*:*:*:*
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/31/2020
Vulnerability Publication Date: 1/16/2018
CVE: CVE-2018-5712, CVE-2018-7584, CVE-2018-10547, CVE-2019-9024