CVE-2009-4095

Опубликовано: 29 нояб. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information.

Ссылки

http://companionway.net/files/myphile/
Patch
Vendor Advisory
http://secunia.com/advisories/37322
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3289
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54350
http://companionway.net/files/myphile/
Patch
Vendor Advisory
http://secunia.com/advisories/37322
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3289
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54350

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:companionway:myphile:1.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00383

Низкий

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-4f5x-fxpp-vm4x

github

почти 4 года назад