Lucene search
MitreCVELIST:CVE-2018-9148HistoryMar 30, 2018 - 7:00 p.m.
CVE-2018-9148
2018-03-3019:00:00
mitre
www.cve.org
3
Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a product that uses My Cloud.
References
Related
nvd
nvd
CVE-2018-9148
2018-03-30 19:29:00
CVE-2018-7171
2018-03-30 21:29:01
cve
cve
CVE-2018-9148
2018-03-30 19:29:00
CVE-2018-7171
2018-03-30 21:29:01
prion
prion
Authentication flaw
2018-03-30 19:29:00
Directory traversal
2018-03-30 21:29:00
packetstorm
packetstorm
TwonkyMedia Server 7.0.11-8.5 Directory Traversal
2018-03-29 00:00:00
cvelist
cvelist
CVE-2018-7171
2018-03-30 21:00:00
zdt
zdt
TwonkyMedia Server 7.0.11-8.5 - Directory Traversal Exploit
2018-03-28 00:00:00
exploitpack
exploitpack
TwonkyMedia Server 7.0.11-8.5 - Directory Traversal
2018-03-28 00:00:00
openvas
openvas
Western Digital My Cloud 03.x / 04.x Authentication Bypass Vulnerability
2020-10-05 00:00:00
Twonky Server 7.0.11 - 8.5 Multiple Vulnerabilities - Active Check
2018-04-07 00:00:00
Twonky Server 7.0.11 - 8.5 Multiple Vulnerabilities - Version Check
2018-04-03 00:00:00
exploitdb
exploitdb
TwonkyMedia Server 7.0.11-8.5 - Directory Traversal
2018-03-28 00:00:00