CVE-2018-9934

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control.

CVSS v3 8.8 HIGH
CVSS v2.0 4.3 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.cnblogs.com/babers/p/8503116.html	Exploit Third Party Advisory
http://www.cnblogs.com/babers/p/8745739.html	Exploit Third Party Advisory
http://www.cnblogs.com/babers/p/8503116.html	Exploit Third Party Advisory
http://www.cnblogs.com/babers/p/8745739.html	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:metinfo:metinfo:6.0.0:*:*:*:*:*:*:*

History

21 Nov 2024, 04:15

Type	Values Removed	Values Added
References	~~() http://www.cnblogs.com/babers/p/8503116.html - Exploit, Third Party Advisory~~	() http://www.cnblogs.com/babers/p/8503116.html - Exploit, Third Party Advisory
References	~~() http://www.cnblogs.com/babers/p/8745739.html - Exploit, Third Party Advisory~~	() http://www.cnblogs.com/babers/p/8745739.html - Exploit, Third Party Advisory

Information

Published : 2018-04-10 07:29

Updated : 2024-11-21 04:15

NVD link : CVE-2018-9934

Mitre link : CVE-2018-9934

CVE.ORG link : CVE-2018-9934

JSON object : View

Products Affected

metinfo

metinfo

CWE

NVD-CWE-noinfo

{"id": "CVE-2018-9934", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-04-10T07:29:00.220", "references": [{"url": "http://www.cnblogs.com/babers/p/8503116.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.cnblogs.com/babers/p/8745739.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.cnblogs.com/babers/p/8503116.html", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.cnblogs.com/babers/p/8745739.html", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control."}, {"lang": "es", "value": "La caracter\u00edstica reset-password en MetInfo 6.0 permite que atacantes remotos cambien contrase\u00f1as arbitrarias mediante vectores relacionados con una cabecera de Host HTTP que se modifica para especificar un servidor web bajo el control del atacante."}], "lastModified": "2024-11-21T04:15:52.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:metinfo:metinfo:6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "150DF8B5-9FE9-41CB-937D-99296CB289BB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}