CVE-2008-0169

2008-06-0300:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.1%

JSON

Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34
through 2.47 allows remote attackers to bypass authentication, and login to
any account for which an OpenID identity is configured and a password is
not configured, by specifying an empty password during the login sequence.