VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 20, 2018· Updated Sep 16, 2024

CVE-2018-1000875

CVE-2018-1000875

Description

Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Boinc/Boincinferred2 versions
    >=0.9,<=1.0.2+ 1 more
    • (no CPE)range: >=0.9,<=1.0.2
    • (no CPE)range: >=0.9, <=1.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.