CVE-2018-1000875

Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be...

CVE-2018-1000875

CVE-2018-1000875 affects BOINC Server and Website Code versions 0.9–1.0.2. The vulnerability is a CWE-302 Authentication Bypass by Assumed-Immutable Data on the Website Terms of Service Acceptance Page, allowing access to any user account via a specially crafted URL. The issue is reported as fixe...