CVE-2018-8096

NONE EPSS 98.8%
Published Mar 14, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 14, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request.

Threat Intelligence

EPSS Exploit Probability
98.8% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-287 Improper Authentication Authentication

Affected Products 1

VendorProductVersionRange
datalustseq* <4.2.605

References 3

  • github.com https://github.com/datalust/seq-tickets/issues/675
    PatchThird Party Advisory
  • medium.com https://medium.com/stolabs/bypass-admin-authentication-on-seq-17f0f9e02732
    ExploitTechnical DescriptionThird Party Advisory
  • exploit-db.com https://www.exploit-db.com/exploits/45136/
    ExploitThird Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/datalust/seq-tickets/issues/675
    PatchThird Party Advisory