CVE-2018-9934

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to…

published April 10, 2018

CVSS
—
EPSS
1%
Percentile
71.4
In the wild
Unconfirmed
What it is

The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01364 · 71.4th percentile
Published
2018-04-10T07:00Z
EPSS history
Timeline
  • 10 APR 07:00Z
    The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to…
    cvelistv5