Improper String Comparison

2022-12-2006:48:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

string comparison

attack

php

redis

authentication

EPSS

0.005

Percentile

76.2%

JSON

erik-dubbelboer/php-redis-admin is vulnerable to improper string comparison. Improper use of operator in string comparison in authHttpDigest function of the file includes/login.inc.php allows an attacker to cause a magic hash attack via the response parameter.