CVE-2017-0356

Опубликовано: 13 апр. 2018

Источник: debian

Описание

A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
ikiwiki	fixed	3.20170111		package

Примечания

https://ikiwiki.info/security/#cve-2017-0356

Связанные уязвимости

CVE-2017-0356

CVSS3: 9.8

ubuntu

почти 8 лет назад

A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.

CVE-2017-0356

CVSS3: 9.8

nvd

почти 8 лет назад

A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.

GHSA-v4mw-26wf-pfx6

CVSS3: 9.8

github

больше 3 лет назад

A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.