CVE-2018-15132: netapp storage_automation_store
Vulnerability summary
CVE-2018-15132 is a high (CVSS 7.5) vulnerability in netapp storage_automation_store. EPSS estimates a 5.14% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-08-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the open_basedir check. This could be abused to find files on paths outside of the allowed directories.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
5.14%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 5.14% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugs.php.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Netapp1 product
Php1 product
- php< 5.6.37 | ≥ 7.0.0, < 7.0.31 | ≥ 7.1.0, < 7.1.20 | ≥ 7.2.0, < 7.2.8
2 vendors · 2 products
References
6 links- github.com/php/php-src/commit/f151e048ed27f6f4eef729f3310d053ab5da71d4X Refsource MISCPatchThird Party Advisory