Symfony Authentication Bypass

🗓️ 14 May 2022 03:10:52Reported by GitHub Advisory DatabaseType

Symfony Authentication Bypass in LDAP Componen

Reporter	Title	Published	Views	Family All 29
CNVD	Symfony Authentication Bypass Vulnerability	14 Jun 201800:00	–	cnvd
CVE	CVE-2018-11407	13 Jun 201816:00	–	cve
Cvelist	CVE-2018-11407	13 Jun 201816:00	–	cvelist
Debian CVE	CVE-2018-11407	13 Jun 201816:00	–	debiancve
EUVD	EUVD-2022-2111	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 27 Update: php-symfony3-3.3.17-1.fc27	7 Jul 201822:17	–	fedora
Fedora	[SECURITY] Fedora 27 Update: php-symfony-2.8.42-1.fc27	7 Jul 201822:16	–	fedora
Fedora	[SECURITY] Fedora 27 Update: php-symfony3-3.3.18-1.fc27	14 Aug 201820:21	–	fedora
Tenable Nessus	Fedora 27 : php-symfony3 (2018-c8ddc44bbb)	9 Jul 201800:00	–	nessus
Tenable Nessus	Ubuntu 18.04 ESM : Symfony vulnerability (USN-4836-1)	16 Oct 202300:00	–	nessus

Vulners

Node

symfony symfonyRange4.0.0–4.0.7composer

symfony symfonyRange3.4.0–3.4.7composer

symfony symfonyRange3.0.0–3.3.17composer

symfony symfonyRange2.8.0–2.8.37composer

symfony securityRange4.0.0–4.0.7composer

symfony securityRange3.4.0–3.4.7composer

symfony securityRange3.0.0–3.3.17composer

symfony securityRange2.8.0–2.8.37composer

symfony security-coreRange4.0.0–4.0.7composer

symfony security-coreRange3.4.0–3.4.7composer

symfony security-coreRange3.0.0–3.3.17composer

symfony security-coreRange2.8.0–2.8.37composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-11407
symfony	www.symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password
github	www.github.com/symfony/symfony/pull/27377
github	www.github.com/symfony/symfony/commit/b46fc93785d37ffa5d706a82cd175b33ce8f2934
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2018-11407.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2018-11407.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2018-11407.yaml
symfony	www.symfony.com/cve-2018-11407
github	www.github.com/advisories/GHSA-35c5-28pg-2qg4

25 Apr 2024 22:11Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

CVSS 39.8

EPSS0.02345