CVE-2014-8764

2014-10-2214:55:08

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.006

Percentile

78.9%

JSON

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character, which triggers an anonymous bind.

Affected configurations

Nvd

Node

mageia_projectmageiaMatch3.0

mageia_projectmageiaMatch4.0

Node

dokuwikidokuwikiRange≤2013-12-08

VendorProductVersionCPE
mageia_projectmageia3.0cpe:2.3:o:mageia_project:mageia:3.0:*:*:*:*:*:*:*
mageia_projectmageia4.0cpe:2.3:o:mageia_project:mageia:4.0:*:*:*:*:*:*:*
dokuwikidokuwiki*cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mageia_project	mageia	3.0	cpe:2.3:o:mageia_project:mageia:3.0:::::::*
mageia_project	mageia	4.0	cpe:2.3:o:mageia_project:mageia:4.0:::::::*
dokuwiki	dokuwiki	*	cpe:2.3:a:dokuwiki:dokuwiki::::::::