Lucene search
HistoryOct 06, 2014 - 2:55 p.m.
CVE-2014-0074
cve-2014-0074
apache shiro
ldap
authentication bypass
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
79.4%
Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username or (2) password.
Affected configurations
Node
apacheshiroMatch1.0.0
ORapacheshiroMatch1.1.0
ORapacheshiroMatch1.2.0
ORapacheshiroMatch1.2.1
ORapacheshiroMatch1.2.2
Related
prion
prion
Authentication flaw
2014-10-06 14:55:00
cvelist
cvelist
CVE-2014-0074
2014-10-06 14:00:00
nvd
nvd
CVE-2014-0074
2014-10-06 14:55:08
debiancve
debiancve
CVE-2014-0074
2014-10-06 14:55:08
redhat
redhat
(RHSA-2014:1351) Important: Red Hat JBoss Fuse/A-MQ 6.1.0 security update
2014-10-01 18:06:06
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
79.4%
Related for CVE-2014-0074