CVE-2017-2864 in Circle with Disney
Summary
An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets to trigger this vulnerability.
Responsible
Talos
Reservation
12/01/2016
Disclosure
11/07/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109196 | Circle with Disney Auth Token improper authentication | 287 | Not defined | Not defined | CVE-2017-2864 |