{"id":"CVE-2017-11319","aliases":["EUVD-2017-2953","GHSA-932v-9p4x-h52g"],"status":"published","title":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access...","description":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05564,"percentile":0.92914,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-269"],"published":"2017-12-11T17:00:00Z","modified":"2026-06-17T01:01:36Z","exploits":[{"source":"exploitdb","id":"EDB-43210","title":"Perspective ICM Investigation \u0026 Case 5.1.1.16 - Privilege Escalation","type":"webapps","platform":"windows","date":"2017-12-05","verified":true,"url":"https://www.exploit-db.com/exploits/43210"}],"products":[{"vendor":"resolver","product":"perspective"}],"references":[{"url":"https://www.exploit-db.com/exploits/43210/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/145230/Perspective-ICM-Investigation-And-Case-5.1.1.16-Privilege-Escalation.html","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11319"},{"url":"https://www.exploit-db.com/exploits/43210"},{"url":"https://github.com/advisories/GHSA-932v-9p4x-h52g"}],"sources":{"cve":[{"id":"CVE-2017-11319","description":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.","status":"published","published":"2017-12-11T17:00:00Z","modified":"2024-08-05T18:05:30.559Z","updated_at":"2026-11-02T14:33:20.171335Z"}],"euvd":[{"id":"EUVD-2017-2953","description":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.","status":"published","published":"2017-12-11T17:00:00Z","modified":"2024-08-05T18:05:30Z","updated_at":"2026-11-03T02:23:24.20034Z"}],"ghsa":[{"id":"GHSA-932v-9p4x-h52g","title":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access...","description":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.","status":"published","published":"2022-05-13T01:42:15Z","modified":"2025-04-20T03:50:52Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:01:56.679657Z"}],"nvd":[{"id":"CVE-2017-11319","description":"Perspective ICM Investigation \u0026 Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms.","status":"published","published":"2017-12-11T17:29:00.3Z","modified":"2026-06-17T01:01:36.463Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:04:10.156892Z"}]}}