PT-2018-11516 · Hycus · Hycus Cms

Publicado 2018-06-29 · Atualizado 2018-08-20 · CVE-2018-12984

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hycus CMS version 1.0.4

Description The issue allows for authentication bypass by using specific credentials, including username and password with a value of '=' 'OR'. This can potentially allow unauthorized access to the system.

Recommendations For Hycus CMS version 1.0.4, update the authentication mechanism to properly validate and sanitize user input to prevent bypass attempts. As a temporary workaround, consider implementing additional authentication checks to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-12984

Produtos afetados

Hycus Cms

Referências · 3

• 🔥 https://exploit-db.com/exploits/44954 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12984 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12984 · Aviso do Fabricante