CVE-2018-1000875: Critical severity berkeley open infrastructure for network computing vulnerability
Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000875?
CVE-2018-1000875 is rated as a medium-severity vulnerability due to its potential for authentication bypass.
How do I fix CVE-2018-1000875?
To fix CVE-2018-1000875, upgrade to a version of the Berkeley Open Infrastructure for Network Computing that is higher than 1.0.2.
What types of software are affected by CVE-2018-1000875?
CVE-2018-1000875 affects the Berkeley Open Infrastructure for Network Computing versions 0.9 to 1.0.2.
What does CVE-2018-1000875 vulnerability entail?
CVE-2018-1000875 allows unauthorized access to user accounts through an authentication bypass in the Terms of Service Acceptance Page.
What are the potential impacts of CVE-2018-1000875?
The potential impacts of CVE-2018-1000875 include unauthorized access to any user account within the affected BOINC server.