CVE-2017-14972

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-10-09

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Mondopad (Infocus)

References

• https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-…