Authentication flaw

2020-11-1320:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.348 Low

EPSS

Percentile

97.1%

JSON

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7.

CPENameOperatorVersion
rconfigge3.9.0
rconfiglt3.9.7

CPE	Name	Operator	Version
	rconfig	ge	3.9.0
	rconfig	lt	3.9.7

References

theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/