CVE-2017-11717

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements…

published July 28, 2017

CVSS
—
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01238 · 68.9th percentile
Published
2017-07-28T05:00Z
EPSS history
Timeline
  • 28 JUL 05:00Z
    MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements…
    cvelistv5