CVE-2010-1596

Опубликовано: 28 апр. 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sitracker:support_incident_tracker:*:*:*:*:*:*:*:*

Версия до 3.50 (включая)

cpe:2.3:a:sitracker:support_incident_tracker:3.21:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.22:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.22pl1:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.23:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.24:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.24:beta-2:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.30:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.30:beta2:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.31:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.32:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.33:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.35:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.35:beta1:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.36:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.40:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.40:beta1:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.41:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.45:*:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.45:beta1:*:*:*:*:*:*

cpe:2.3:a:sitracker:support_incident_tracker:3.50:beta1:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00442

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-9v83-922f-cpvf

github

больше 3 лет назад