CVE-2018-8715

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c

published March 14, 2018

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22790 · 97.7th percentile
Published
2018-03-14T20:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 23% → 12%
    epss
  • 06 SEP 03:12Z
    EPSS moved 23% → 12%
    epss
  • 30 AUG 16:01Z
    EPSS moved 12% → 23%
    epss
  • 29 AUG 04:43Z
    EPSS moved 23% → 12%
    epss
  • 14 MAR 20:00Z
    The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c
    cvelistv5