CVE-2018-17791 — HIGH (7.5)

Vulnerability Description

Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate information is stored on the server side and fetched from the server every time the user visits the D, creating business confusion. In the worst case, all available resources are consumed while processing the data, resulting in unavailability of the service to legitimate users. This occurs because non-editable parameters can be modified by manually editing a disabled form field within the developer options.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Newgensoft	Omniflow Intelligent Business Process Suite	7.0

Related Weaknesses (CWE)

CWE-669

References

http://packetstormsecurity.com/files/154061/OmniDoc-7.0-Input-Validation.htmlThird Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/cve/CVE-2018-17791
http://packetstormsecurity.com/files/154061/OmniDoc-7.0-Input-Validation.htmlThird Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/cve/CVE-2018-17791

FAQ

What is CVE-2018-17791?

CVE-2018-17791 is a vulnerability with a CVSS score of 7.5 (HIGH). Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate information is stored...

How severe is CVE-2018-17791?

CVE-2018-17791 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-17791?

Check the references section above for vendor advisories and patch information. Affected products include: Newgensoft Omniflow Intelligent Business Process Suite.