CVE-2018-16163

OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors.

Score

CVSS 3.0 6.5 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2018-11-15

Last modified

2024-08-05

Affected products

• Opendolphin (Life Sciences Computing Corporation)
• Opendolphin (Opendolphin)

References

• http://jvn.jp/en/jp/JVN59394343/index.html
• http://www.opendolphin.com/security20181023.html