Approved changes feed: RSS · Atom

cpe:2.3:a:berkeley:berkeley_open_infrastructure_for_network_computing:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBerkeley (0c667b3d-0cee-5a69-ae97-f37b81bf2d52)
ProductBerkeley Open Infrastructure For Network Computing (762ce797-7abb-50ac-8166-9b0248783c8a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/boinc purl2cpe 2026-06-01 10:18:13.040494
pkg:deb/ubuntu/boinc purl2cpe 2026-06-01 10:18:13.040496
pkg:github/boinc/boinc purl2cpe 2026-06-01 10:18:13.040497

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000875 vulnerable 2026-06-08 05:10:26.166466 Details available
Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.
Published: 2018-12-20T17:00:00.000Z
Updated: 2024-09-16T19:52:08.915Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.