Critical severity9.8NVD Advisory· Published Jan 31, 2019· Updated Jun 17, 2026
CVE-2018-18941
CVE-2018-18941
Description
In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is discontinued.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:vignette:content_management:6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vignette:content_management:6:*:*:*:*:*:*:*
- (no CPE)range: 6
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2018/Nov/32nvdExploitMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.