CVE-2018-7213
Last modified
CVE-2018-7213 is a vulnerability of currently unknown severity. The Password Manager Extension in Abine Blur 7.8.242* before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption protection mechanisms, and consequently exfiltrate secured data, because the right-click context menu is not secured.. EPSS estimates a 1.66% chance of exploitation in the next 30 days.
Description
The Password Manager Extension in Abine Blur 7.8.242* before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption protection mechanisms, and consequently exfiltrate secured data, because the right-click context menu is not secured.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Abine | Blur | 7.8.2424 |
References
- https://redcoded.com/2018/CVE/Third Party Advisory
- https://redcoded.com/2018/CVE/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7213?
How severe is CVE-2018-7213?
How do I fix CVE-2018-7213?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7207Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2018-7208In the coff_pointerize_aux function in coffgen.c in the Bina…
- CVE-2018-7209An issue was discovered in iDashboards 9.6b. It allows remot…
- CVE-2018-7210An issue was discovered in iDashboards 9.6b. It allows remot…
- CVE-2018-7211An issue was discovered in iDashboards 9.6b. The SSO impleme…
- CVE-2018-7212An issue was discovered in rack-protection/lib/rack/protecti…
- CVE-2018-7216Cross-site request forgery (CSRF) vulnerability in esop/tool…
- CVE-2018-7217In Bravo Tejari Procurement Portal, uploaded files are not p…
- CVE-2018-7218The AppFirewall functionality in Citrix NetScaler Applicatio…
- CVE-2018-7219application/admin/controller/Admin.php in NoneCms 1.3.0 has …
- CVE-2018-7225An issue was discovered in LibVNCServer through 0.9.11. rfbP…
- CVE-2018-7226An issue was discovered in vcSetXCutTextProc() in VNConsole.…
Are you affected by CVE-2018-7213?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
