Description
Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Navarino | Infinity | 2.2 – < 2.2 | 2.2 |
Unscored
CVE-2018-5386
EUVD-2018-17157GHSA-x93w-rxpc-g58g
Some Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leak
Published Jul 24, 2018 · Updated Aug 5, 2024 · Assigned by certcc