CVE-2017-8916
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-8916
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail address and send a forgot password email to themselves, thereby gaining administrative access.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Center for Internet Security CIS-CAT Pro Dashboard 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Center for Internet Security CIS-CAT Pro Dashboard是一套用于在仪表板上显示系统合规性的面板。 Center for Internet Security CIS-CAT Pro Dashboard 1.0.4之前版本中存在访问控制错误漏洞。攻击者可通过更改管理员邮箱地址，并发送密码找回邮件利用该漏洞获取管理员访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2017-8916
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-8916
请登录查看更多情报信息。
Same Patch Batch · n/a · 2018-01-31 · 30 CVEs total
| CVE-2018-6474 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6412 | Linux kernel 安全漏洞 | |
| CVE-2018-1000001 | GNU glibc 权限许可和访问控制问题漏洞 | |
| CVE-2017-1000411 | OpenDaylight OpenFlow Plugin和Controller 安全漏洞 | |
| CVE-2018-6384 | NSClient++ 安全漏洞 | |
| CVE-2018-6460 | Hotspot Shield 安全漏洞 | |
| CVE-2018-6465 | WordPress PropertyHive插件跨站脚本漏洞 | |
| CVE-2018-6464 | Simditor 跨站脚本漏洞 | |
| CVE-2018-6462 | Tracker PDF-XChange Viewer和Viewer AX SDK 安全漏洞 | |
| CVE-2018-5996 | 7-Zip和p7zip 安全漏洞 | |
| CVE-2018-5701 | Iolo System Shield AntiVirus and AntiSpyware 安全漏洞 | |
| CVE-2014-1632 | Eventum 安全漏洞 | |
| CVE-2014-1631 | Eventum 安全漏洞 | |
| CVE-2018-6476 | SUPERAntiSpyware Professional Trial SASKUTIL.SYS驱动程序安全漏洞 | |
| CVE-2018-6475 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6374 | Pulse Secure Desktop Linux clients GUI组件安全漏洞 | |
| CVE-2018-6473 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6472 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6471 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6480 | CCN-lite 安全漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-8916
No comments yet