CVE-2018-17928CWE-287

The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user…

published January 31, 2019

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00766 · 55.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2019-01-31T21:00Z
EPSS history
Timeline
  • 31 JAN 21:00Z
    The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user…
    cvelistv5