Lucene search

K
nvd[email protected]NVD:CVE-2014-8763
HistoryOct 22, 2014 - 2:55 p.m.

CVE-2014-8763

2014-10-2214:55:08
CWE-287
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

78.9%

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null (\0) character and a valid user name, which triggers an unauthenticated bind.

Affected configurations

Nvd
Node
dokuwikidokuwikiRange2014-05-05a
Node
mageia_projectmageiaMatch3.0
OR
mageia_projectmageiaMatch4.0
VendorProductVersionCPE
dokuwikidokuwiki*cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*
mageia_projectmageia3.0cpe:2.3:o:mageia_project:mageia:3.0:*:*:*:*:*:*:*
mageia_projectmageia4.0cpe:2.3:o:mageia_project:mageia:4.0:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

78.9%