CVE-2018-18254

Name of the Vulnerable Software and Affected Versions CapMon Access Manager version 5.4.1.1005

Description An issue allows an unprivileged user to read the cal whitelist table in the Custom App Launcher database. This could potentially allow the user to gain privileges by placing a Trojan horse program at an app pathname.

Recommendations For version 5.4.1.1005, consider restricting access to the Custom App Launcher database to prevent unauthorized reading of the cal whitelist table. As a temporary workaround, monitor the app pathnames for any suspicious activity that could indicate the presence of a Trojan horse program.