CVE-2014-8763

2014-10-2214:55:08

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

78.9%

JSON

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null (\0) character and a valid user name, which triggers an unauthenticated bind.

Affected configurations

Nvd

Node

dokuwikidokuwikiRange≤2014-05-05a

Node

mageia_projectmageiaMatch3.0

mageia_projectmageiaMatch4.0

VendorProductVersionCPE
dokuwikidokuwiki*cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*
mageia_projectmageia3.0cpe:2.3:o:mageia_project:mageia:3.0:*:*:*:*:*:*:*
mageia_projectmageia4.0cpe:2.3:o:mageia_project:mageia:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dokuwiki	dokuwiki	*	cpe:2.3:a:dokuwiki:dokuwiki::::::::
mageia_project	mageia	3.0	cpe:2.3:o:mageia_project:mageia:3.0:::::::*
mageia_project	mageia	4.0	cpe:2.3:o:mageia_project:mageia:4.0:::::::*