Описание
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| cacti | fixed | 1.2.20+ds1-1 | package |
Примечания
https://github.com/Cacti/cacti/issues/4562
https://github.com/Cacti/cacti/commit/1386bdbf7f845a32e24ac9415f3ebb7932e77fe7 (1.2.x)
https://github.com/Cacti/cacti/commit/8694bf28edad723585915a97b95fbf5b1816a02b (1.2.x)
https://github.com/Cacti/cacti/commit/0bb77ee9b4d1c7a99e0140b88789e050e523e628 (1.2.x)
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 4 года назад
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
CVSS3: 9.8
nvd
почти 4 года назад
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
CVSS3: 9.8
github
почти 4 года назад
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.