CoreCVE
Back

HIGH

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page

Published Jul 28, 2017

Description

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 28, 2017
Updated Aug 5, 2024
Reserved Jul 27, 2017
Link CVE-2017-11717
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-11717
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-11717