CVE-2018-7211 Weak cryptography in n/a
Weak obfuscation in iDashboards SSO allows man-in-the-middle attackers to discover credentials, leading to potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7211?
CVE-2018-7211 is a high-severity vulnerability in n/a, published on 18 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak obfuscation library, allowing man-in-the-middle attackers to discover credentials.
Weakness: CWE-327
Which versions are affected by CVE-2018-7211?
It affects 1 product.
Products include Idashboards Idashboards.
How do I fix CVE-2018-7211?
No fix has been published for CVE-2018-7211 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-7211 being exploited?
There is no known exploitation of CVE-2018-7211 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w4cx-h5mp-pgc3.