high7.5
CVE-2018-5386
Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.
Impact
Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Navarino | Infinity | through 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103544
- https://medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3
- https://packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.html
- https://www.kb.cert.org/vuls/id/184077
- http://www.securityfocus.com/bid/103544
- https://medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3
- https://packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.html
- https://www.kb.cert.org/vuls/id/184077