Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2018/03/14 8:00 p.m.•48 views

CVE-2018-8715

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types...

8.2AI score0.2279EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/14 12:00 a.m.•3 views

CVE-2018-8715: Improper Authentication

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types...

8.1CVSS7.5AI score0.2279EPSS
SaveExploits2References2
Rows per page
Query Builder