CVE-2018-9934

Summary: CVE-2018-9934 affects MetInfo 6.0, where the reset-password feature can be abused by an attacker who manipulates the Host HTTP header to point to a controlled web server, enabling arbitrary password changes. The vulnerability is contextually described as a network‑level issue with plausi...

CVE-2018-9934

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control...