[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuXPdk3pkjDDCn2jq7d19TlKQsTRgAtQJENwr-s0-om4":3,"g5a-risk:CVE-2018-21031":118},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":37,"weaknesses":70,"weaknessesCount":49,"isActivelyExploited":79,"cisaInfo":27,"otxData":27,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":114,"notableEvents":115},"CVE-2018-21031","What is CVE-2018-21031?","Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the X-Plex-Token is mishandled and can be retrieved from Tautulli. NOTE: Initially, this id was associated with Plex Media Server 1.18.2.2029-36236cc4c as the affected product and version. Further research indicated that Tautulli is the correct affected product.","Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the X-Plex-Token is mishandled and ...","2019-11-18T17:15:10.847","2022-04-18T18:09:14.697",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.02059,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"plex","media_server","1.18.2.2029-36236cc4c","cpe:2.3:a:plex:media_server:1.18.2.2029-36236cc4c:*:*:*:*:*:*:*",1,[51,56,60,65],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fforums.plex.tv\u002Ft\u002Fsecurity-regarding-cve-2018-21031\u002F493286","Plex",[55],"Third Party Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Ftwitter.com\u002FGerardFuguet\u002Fstatus\u002F1009937529573912576","Twitter",[55],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.elladodelmal.com\u002F2018\u002F08\u002Fshodan-es-de-cine-hacking-tautulli-un.html","Elladodelmal",[64,55],"Exploit",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.exploit-db.com\u002Fdocs\u002F47790","Exploit-db",[64,55,69],"VDB Entry",[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2018-21031? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-21031, a medium severity cyber security vulnerability from 2019. Tautulli versions 2.1.38 and below allows remote attacker...","CVE-2018-21031, CVE-2018-21031 vulnerability, CVE-2018-21031 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, plex security, media_server vulnerability","\u002Fwhat-is\u002Fcve-2018-21031",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-21031","Cybersecurity","CVE-2018-21031, CVE-2018-21031 vulnerability, CVE-2018-21031 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":27,"Negate":27,"Nodes":108},[109],{"Operator":110,"Negate":27,"CPEMatch":111},"OR",[112],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BBBEA29C-DA1A-4A52-B641-69196B82805C",[],[],{"lastModified":11,"cacheTime":117,"version":33},1793386819308,{"score":119,"band":42,"action":120,"scoredAt":121},45,"Plan remediation","2026-10-30T06:47:45.844647+00:00"]