[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJk2zKyIkUXRLx6oxVBZot4kVk0OgAQkkFsBsdjClZgk":3,"g5a-risk:CVE-2018-19638":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":15,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":28,"references":57,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":82,"cisaInfo":15,"otxData":15,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":118,"notableEvents":119},"CVE-2018-19638","What is CVE-2018-19638?","In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.","In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the dir...","2019-03-05T16:29:00.387","2023-11-07T02:55:36.383",4.7,"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":39,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","HIGH","LOW","NONE","UNCHANGED","MEDIUM",1,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"f81092c5-7f14-476d-80dc-24857f90be84","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":35,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":24,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","REQUIRED",2.2,0.8,1.4,[40],{"Source":18,"Type":19,"CVSSData":41,"BaseSeverity":24,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":27,"Authentication":25,"ConfidentialityImpact":25,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:P","PARTIAL",3.3,3.4,4.9,0.00399,[48,48,48,48,48,48,48],"Medium",[52],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"opensuse","supportutils","*","cpe:2.3:a:opensuse:supportutils:*:*:*:*:*:*:*:*",[58,62],{"url":59,"source":60,"tags":61},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-05\u002Fmsg00018.html","Opensuse",[],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1118460","Suse",[],2,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",{"id":77,"name":78,"description":79,"extendedDescription":72,"status":80,"abstraction":81,"structure":75},"CWE-377","Insecure Temporary File","Creating and using insecure temporary files can leave application and system data vulnerable to attack.","Incomplete","Class",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2018-19638? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-19638, a medium severity cyber security vulnerability from 2019. In supportutils, before version 3.1-5.7.1 and if pacemake...","CVE-2018-19638, CVE-2018-19638 vulnerability, CVE-2018-19638 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, opensuse security, supportutils vulnerability","\u002Fwhat-is\u002Fcve-2018-19638",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-19638","Cybersecurity","CVE-2018-19638, CVE-2018-19638 vulnerability, CVE-2018-19638 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":15,"Negate":15,"Nodes":111},[112],{"Operator":113,"Negate":15,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":116,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":117,"VersionEndIncluding":15},"69558DCA-145A-4811-9EE6-B9BADA48F676","3.1-5.7.1",[],[],{"lastModified":11,"cacheTime":121,"version":42},1793228222330,{"score":123,"band":124,"action":125,"scoredAt":126},13,"Info","Track","2026-10-28T06:45:34.602002+00:00"]