CVE-2018-5386CWE-288

Some Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leak

published July 24, 2018

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04461 · 91.3th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2018-07-24T15:00Z
EPSS history
Timeline
  • 24 JUL 15:00Z
    Some Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leak
    cvelistv5