jitbit

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

jitbit records in CISA KEV

No jitbit vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Helpdesk · all components

TI-2017-13659 CVE-2017-18486 · GHSA-xp26-jqrv-cc5r

LOW 39

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04807 Published 2019-08-09 No fix listed CWE-332