CVE-2017-2864
CriticalSummary
An exploitable vulnerability exists in the authentication token generation functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker.
Risk Assessment
This vulnerability may lead to unauthorized access to the system, posing a serious threat to user data security.
Recommendation
It is recommended to update the Circle with Disney system and monitor network traffic to detect and block suspicious packets.
Original NVD description (English source)
An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets to trigger this vulnerability.