CVE-2014-8764

EPSS 1.2%

發布日:2014/10/22修改日:2026/5/27

也稱為:DEBIAN-CVE-2014-8764

描述

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character, which triggers an anonymous bind.

受影響套件(1)

Debian/dokuwikifrom 0, < 0.0.20140929.a-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-8764