CVE-2018-15656 - CVE House
Back to Database
Status published High CVE-2018-15656

An issue was discovered in the registration API endpoint in...

Vulnerability Description

An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, where :email is a base64 encoded e-mail address, to receive confirmation as to whether a user account exists in the system with the specified e-mail address. The request must be made with an "apiKey" value in the "ApiKey" header.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15656

Credits & Attribution

No credits recorded in the NVD database.

References

More from 42gears

View All →
CVE-2023-2335
Plaintext Password in Registry
Medium 6.5
CVE-2018-15659
An issue was discovered in 42Gears SureMDM before 2018-11-27, related...
Medium 6.5
CVE-2018-15658
An issue was discovered in 42Gears SureMDM before 2018-11-27. By...
High 7.5
CVE-2018-15657
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27...
High 7.3
CVE-2018-15655
An issue was discovered in 42Gears SureMDM before 2018-11-27, related...
Medium 6.5

Affected Vendor

Affected Software

suremdm
Vulnerable Versions:
0

Timeline

Official Publish: February 5th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.