Lucene search
PRIOn knowledge basePRION:CVE-2018-10168HistoryMay 03, 2018 - 6:29 p.m.
Cross site request forgery (csrf)
2018-05-0318:29:00
PRIOn knowledge base
www.prio-n.com
3
TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1_Windows.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eap_controller | eq | 2.5.4 | |
| eap_controller | eq | 2.6.0 |
Related
cve
cve
CVE-2018-10168
2018-05-03 18:29:00
nvd
nvd
CVE-2018-10168
2018-05-03 18:29:00
cvelist
cvelist
CVE-2018-10168
2018-05-03 18:00:00
packetstorm
packetstorm
TP-Link EAP Controller CSRF / Hard-Coded Key / XSS
2018-05-04 00:00:00
zdt
zdt
TP-Link EAP Controller CSRF / Hard-Coded Key / XSS Vulnerabilities
2018-05-04 00:00:00
coresecurity
coresecurity
TP-Link EAP Controller Multiple Vulnerabilities
2018-05-03 00:00:00