CVE-2018-10081: Critical severity simple cms vulnerability
Published Apr 13, 2018
·Updated
CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple<=2.2.7
Event History
Apr 13, 2018
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10081?
CVE-2018-10081 is considered a high severity vulnerability due to the potential for unauthorized password resets in CMS Made Simple.
2
How do I fix CVE-2018-10081?
To fix CVE-2018-10081, upgrade CMS Made Simple to version 2.2.8 or later.
3
Which versions of CMS Made Simple are affected by CVE-2018-10081?
CVE-2018-10081 affects CMS Made Simple versions up to and including 2.2.7.
4
What does CVE-2018-10081 exploit?
CVE-2018-10081 exploits improper data value comparisons during the admin password reset process.
5
Can CVE-2018-10081 lead to data breaches?
Yes, CVE-2018-10081 can lead to unauthorized access and potential data breaches by allowing attackers to reset admin passwords.