CVE-2018-1163 in the critical feed json
This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13.
published 2018-02-08 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-11801
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 16.0%
- EPSS 16.0% chance of exploitation in 30 days, percentile 96%
- public exploits
- 0
- none known
Summary
This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13. The specific flaw exists within JSON RPC Request handling. By setting the checksession parameter to a specific value, it is possible to bypass authentication to critical functions. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-4752.
Exploit prediction
16.04% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Quest Quest NetVault Backup
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
zerodayinitiative.com
/advisories/ZDI-18-006
third-party-advisory, vdb-entry
Sources
- CVE List CVE-2018-1163
- NVD CVE-2018-1163
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.