7 matches found
Authentication flaw
The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...
CVE-2011-4069
html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...
CVE-2011-4068
The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...
PT-2018-4035
Name of the Vulnerable Software and Affected Versions PacketFence versions prior to 3.0.2 Description The issue allows remote attackers to conduct LDAP injection attacks, which can lead to authentication bypass via a crafted username. This is related to the html/admin/login.php file...
CVE-2011-4069: Improper Neutralization of Special Elements used in an LDAP Query
html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...
PT-2018-4034
Name of the Vulnerable Software and Affected Versions PacketFence versions prior to 3.0.2 Description The issue allows remote attackers to bypass authentication. This is possible due to the check password function in html/admin/login.php allowing an empty password. Recommendations For versions...
CVE-2011-4068: Improper Authentication
The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...