CVE-2017-15379

Critical

Published: 23/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An authentication bypass exists in E-Sic 1.0 via '=' or 'or' values for the username and password in the /index (login) URI.

An attacker can gain access to the system without valid credentials, posing a serious threat to user data security.

It is recommended to update the software to the latest version and implement additional security measures, such as limiting login attempts.

Original NVD description (English source)

An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.