CVE-2017-2101

HIGH

AppGoat <V3.0.0 - Auth Bypass

Title source: llm

Description

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to bypass authentication to perform arbitrary operations via unspecified vectors.

Scores

CVSS v3 7.3
EPSS 0.0042
EPSS Percentile 61.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-287
Status draft

Affected Products (1)

ipa/appgoat < 3.0.0

Timeline

Published Apr 28, 2017
Tracked Since Feb 18, 2026