CVE-2018-5354

The CVE-2018-5354 entry affects ANIXIS Password Reset Client (GINA/CP module) before v3.22. The flaw allows remote code execution and privilege escalation through spoofing when HTTP is used, as the client fails to authenticate the server before opening a browser window, enabling a spoofing attack...