Authentication Bypass

2017-08-2902:21:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

73.3%

JSON

casual/ig_ldap_sso_auth is vulnerable to authentication bypass. A malicious user with the knowledge of a username can login with an empty password through LDAP.

CPENameOperatorVersion
causal/ig_ldap_sso_authle2.0.0

CPE	Name	Operator	Version
	causal/ig_ldap_sso_auth	le	2.0.0

References

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-001/

0.004 Low

EPSS

Percentile

73.3%

JSON

Related for VERACODE:4974