CVE-2024-36042

1976-01-0100:00:00

mitre

github.com

AI Score

7.2

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:silverpeas:silverpeas:0:*:*:*:*:*:*:*"
    ],
    "vendor": "silverpeas",
    "product": "silverpeas",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "6.3.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]