Vulnerabilities > CVE-2018-18817 - Unspecified vulnerability in Leostream Agent and Connection Broker

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

leostream

NVD

Published: 2018-10-30

Updated: 2020-08-24

Summary

The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API.

Vulnerable Configurations

Part	Description	Count
Application	Leostream Leostream Connection Broker - Leostream Connection Broker 8.0.46 Leostream Connection Broker 8.0.47 Leostream Connection Broker 8.0.56 Leostream Connection Broker 8.0.61 Leostream Connection Broker 8.0.64 Leostream Connection Broker 8.0.77 Leostream Connection Broker 8.0.80 Leostream Connection Broker 8.0.84 Leostream Connection Broker 8.1.15 Leostream Connection Broker 8.1.19 Leostream Connection Broker 8.1.22 Leostream Connection Broker 8.1.23 Leostream Connection Broker 8.1.35 Leostream Connection Broker 8.1.44 Leostream Connection Broker 8.1.57 Leostream Connection Broker 8.1.67 Leostream Connection Broker 8.1.70 Leostream Connection Broker 8.1.84 Leostream Connection Broker 8.1.88 Leostream Connection Broker 8.1.90 Leostream Connection Broker 8.1.93 Leostream Connection Broker 8.2.15 Leostream Connection Broker 8.2.17 Leostream Connection Broker 8.2.27 Leostream Connection Broker 8.2.33 Leostream Connection Broker 8.2.37 Leostream Connection Broker 8.2.52 Leostream Connection Broker 8.2.63 Leostream Connection Broker 8.2.67 Leostream Connection Broker 8.2.71 Leostream Connection Broker 8.2.72 Leostream Agent - Leostream Agent 7.0	34

References

https://leostream.kayako.com/Knowledgebase/Article/View/85/52/leostream-agent-security-update