Lucene search

[email protected]CVE-2010-1596

HistoryApr 28, 2010 - 11:30 p.m.

CVE-2010-1596

2010-04-2823:30:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2010-1596

support incident tracker

ldap authentication

remote attackers

authentication bypass

7.1 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

CPENameOperatorVersion
sitracker:support_incident_trackersitracker support incident trackereq3.45
sitracker:support_incident_trackersitracker support incident trackereq3.35
sitracker:support_incident_trackersitracker support incident trackereq3.30
sitracker:support_incident_trackersitracker support incident trackereq3.33
sitracker:support_incident_trackersitracker support incident trackereq3.41
sitracker:support_incident_trackersitracker support incident trackereq3.22
sitracker:support_incident_trackersitracker support incident trackereq3.32
sitracker:support_incident_trackersitracker support incident trackereq3.36
sitracker:support_incident_trackersitracker support incident trackereq3.21
sitracker:support_incident_trackersitracker support incident trackereq3.31

CPE	Name	Operator	Version
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.45
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.35
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.30
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.33
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.41
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.22
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.32
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.36
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.21
sitracker:support_incident_tracker	sitracker support incident tracker	eq	3.31

Rows per page:

1-10 of 151

References

bugs.sitracker.org/view.php?id=1047

osvdb.org/61945

secunia.com/advisories/38329

sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292

sitracker.org/wiki/ReleaseNotes351

www.securityfocus.com/bid/37949

exchange.xforce.ibmcloud.com/vulnerabilities/55871

7.1 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON

Related for CVE-2010-1596

prion1 cvelist1 openvas2