CVE-2018-16286

2018-09-1421:00:00

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.007

Percentile

79.7%

JSON

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

References

mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html