CVE-2010-1596

Summary

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/37949
• http://sitracker.org/wiki/ReleaseNotes351
• http://sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55871
• http://osvdb.org/61945
• http://secunia.com/advisories/38329
• http://bugs.sitracker.org/view.php?id=1047

References

• http://www.securityfocus.com/bid/37949
• http://sitracker.org/wiki/ReleaseNotes351
• http://sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55871
• http://osvdb.org/61945
• http://secunia.com/advisories/38329
• http://bugs.sitracker.org/view.php?id=1047

• ←Previous
• Next→