high8.1
CVE-2018-8715
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c.
Impact
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Embedthis | Appweb | through 7.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.securiteam.com/index.php/archives/3676
- https://github.com/embedthis/appweb/issues/610
- https://security.paloaltonetworks.com/CVE-2018-8715
- https://blogs.securiteam.com/index.php/archives/3676
- https://github.com/embedthis/appweb/issues/610
- https://security.paloaltonetworks.com/CVE-2018-8715