CVE-2018-0486

MEDIUM · CVSS 6.5 EPSS 1.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-0486

Severity

MEDIUM

CVSS

6.5

EPSS

1.53%

Windows

Original NVD Description

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.