CVE-2017-2101 Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to bypass authentication to perform arbitrary operations via unspecified vectors.
HighCVSS 7.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to bypass authentication to perform arbitrary operations via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipa appgoat | <= 3.0.0 | No fix listed |
| INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application | = V3.0.0 and earlier | No fix listed |
References
- JVN#88176589 third-party-advisory vdb-entry
- 96261 third-party-advisory vdb-entry