Main
Vulnerability Database
Exploits
ID:4699 - Exploit for Authentication bypass issues in Datalust Seq - CVE-2018-8096
ID:4699 - Exploit for Authentication bypass issues in Datalust Seq - CVE-2018-8096
Published: October 14, 2020
Vulnerability identifier: #VU12731
Vulnerability risk: Low
CVE-ID: CVE-2018-8096
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
Datalust Seq
Datalust Seq
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The weakness exists due to authentication bypass. A remote attacker can submit a specially crafted '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request and bypass authentication and gain admin access.
The weakness exists due to authentication bypass. A remote attacker can submit a specially crafted '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request and bypass authentication and gain admin access.
Remediation
Update to version 4.2.605.