CVE-2019-18418

Critical

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no…

mitre·CWE-384·Published 2019-10-24

CVSS

9.8

EPSS

0.04

KEV

Exploits

cve.orgen

157 chars

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.

NVDen

157 chars

clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.

El archivo clonos.php en el panel de control de ClonOS WEB versión 19.09, permite a atacantes remotos conseguir acceso completo por medio de peticiones de cambio de contraseña porque no existe administración de sesión.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H