The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-03-14T20:00:00
Updated: 2024-08-05T07:02:25.922Z
Reserved: 2018-03-14T00:00:00
Link: CVE-2018-8715
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-03-15T01:29:04.447
Modified: 2024-11-21T04:14:11.563
Link: CVE-2018-8715
Redhat
No data.