CVE-2011-4973

Опубликовано: 04 мая 2011

Источник: redhat

CVSS2: 4

Описание

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Certificate System 8	mod_nss	Affected
Red Hat Directory Server 8	fortitude-mod_nss	Affected
Red Hat Enterprise Linux 7	mod_nss	Not affected
Red Hat Enterprise Linux 5	mod_nss	Fixed	RHBA-2013:0009	07.01.2013
Red Hat Enterprise Linux 6	mod_nss	Fixed	RHBA-2011:1656	05.12.2011

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1017197mod_nss: FakeBasicAuth authentication bypass

4 Medium

CVSS2

Связанные уязвимости

CVE-2011-4973

CVSS3: 9.8

ubuntu

почти 8 лет назад

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

CVE-2011-4973

CVSS3: 9.8

nvd

почти 8 лет назад

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

CVE-2011-4973

CVSS3: 9.8

debian

почти 8 лет назад

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote att ...

GHSA-mmjq-r7xw-fqr8

CVSS3: 9.8

github

больше 3 лет назад

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

4 Medium

CVSS2