exploitDog

CVE-2002-0007

Опубликовано: 31 янв. 2002

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*

Версия до 2.14.1 (включая)

EPSS

Процентиль: 82%

0.01839

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0007

redhat

больше 23 лет назад

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.

GHSA-xmjv-5hmh-hg5p

github

больше 3 лет назад

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.

EPSS

Процентиль: 82%

0.01839

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other