CVE-2016-2403

2017-02-0717:59:00

Google

osv.dev

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

JSON

Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind.

CPENameOperatorVersion
security-httpeq2.2.6
security-httpeq2.2.0-RC1
security-httpeq2.5.3
security-httpeq2.6.0
security-httpeq2.1.0-BETA4
security-httpeq2.4.2
security-httpeq2.4.7
security-httpeq2.0.23
security-httpeq2.3.14
security-httpeq2.3.32

Name	Operator	Version
security-http	eq	2.2.6
security-http	eq	2.2.0-RC1
security-http	eq	2.5.3
security-http	eq	2.6.0
security-http	eq	2.1.0-BETA4
security-http	eq	2.4.2
security-http	eq	2.4.7
security-http	eq	2.0.23
security-http	eq	2.3.14
security-http	eq	2.3.32