CVE-2018-5385 Navarino Infinity web interface up to version 2.2 is prone to session fixation attacks
Attackers can bypass two-factor authentication via session fixation in Navarino Infinity, potentially leading to account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-5385?
CVE-2018-5385 is a high-severity authentication bypass vulnerability in Navarino Infinity, published on 24 Jul 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Navarino Infinity is prone to session fixation attacks. The server accepts the session ID as a GET parameter which can lead to bypassing the two factor authentication in some installations. This could lead to phishing attacks that can bypass the two factor authentication that is present in some installations.
Weakness: CWE-384
Which versions are affected by CVE-2018-5385?
It affects 1 product.
Products include Navarino Infinity.
How do I fix CVE-2018-5385?
No fix has been published for CVE-2018-5385 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-5385 being exploited?
There is no known exploitation of CVE-2018-5385 in the wild and no public exploit code.
Other vulnerabilities in Navarino Infinity
Sources
Also known as GHSA-g9mm-555g-3956.