Skip to content

CVE-2018-8096 Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenti...

CriticalCVSS 9.8 EPSS 48.2% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request.

Affected products

ProductAffected versionsFixed in
datalust seq < 4.2.605 4.2.605

References

  • github.com patch third-party-advisory
  • medium.com exploit technical-description third-party-advisory
  • 45136 exploit third-party-advisory vdb-entry