Security Advisory

CVE-2018-20371

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-23 02:00:00

Last updated 2024-09-16 20:41:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.html__passwd1" and "GET /login.html__passwd2" and so on.

← Browse all CVEs View on cve.org ↗