CVE-2018-17287

PoC —

CVSS 3.0

4.9 medium

EPSS

<1%p36

Published

Apr 18, 2019 (Apr 18, 2019)

Modified

Jun 17, 2026

Description

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.

Vendors: kofax
Products: front office server
Weakness: CWE-311, CWE-345
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.