CVE-2018-5386

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information…

certcc·CWE-288·Published 2018-07-24

CVSS

—

EPSS

0.05

KEV

Exploits

cve.orgen

142 chars

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.

NVDen

142 chars

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.

NVDes

179 chars

Algunas funciones de Navarino Infinity, hasta la versión 2.2, pueden omitir cualquier mecanismo de autenticación si se colocan en la URL, lo que conduce a una fuga de información.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N