CVE-2017-9421

Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-05-24

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Kiteworks (Accellion)

References

• https://github.com/jer1nj0y/Vulns/blob/master/Kiteworks%20Vulnerability