CVE-2018-9934: High severity Metinfo Metinfo vulnerability
Published Apr 10, 2018
·Updated
The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control.
Affected Software
1 affected component
Metinfo Metinfo=6.0.0
Event History
Apr 10, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2018-9934.
2
What is the severity of CVE-2018-9934?
The severity of CVE-2018-9934 is high with a score of 8.8.
3
Which software versions are affected by CVE-2018-9934?
MetInfo version 6.0.0 is affected by CVE-2018-9934.
4
How can remote attackers exploit CVE-2018-9934?
Remote attackers can exploit CVE-2018-9934 by changing arbitrary passwords using a modified Host HTTP header.
5
Are there any references or sources related to CVE-2018-9934?
Yes, you can find more information about CVE-2018-9934 at http://www.cnblogs.com/babers/p/8503116.html and http://www.cnblogs.com/babers/p/8745739.html.