CVE-2011-4069

2018-02-0117:00:00

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username.

References

packetfence.org/bugs/changelog_page.php?version_id=35

packetfence.org/bugs/view.php?id=1293