PT-2008-1818 · Tikiwiki · Ikiwiki

Publicado 2008-06-03 · Atualizado 2024-06-15 · CVE-2008-0169

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ikiwiki versions 1.34 through 2.47

Description The issue allows remote attackers to bypass authentication and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence.

Recommendations For versions 1.34 through 2.47, consider configuring a password for all accounts with OpenID identities to prevent exploitation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0169

OPENSUSE-SU-2024:10860-1

Produtos afetados

Ikiwiki

Referências · 28

• https://suse.com/security/cve/CVE-2016-10026 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0169 · Nota
• https://suse.com/security/cve/CVE-2019-9187 · Nota
• https://suse.com/security/cve/CVE-2014-1572 · Nota
• https://suse.com/security/cve/CVE-2011-0428 · Nota
• http://openwall.com/lists/oss-security/2008/05/31/3 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-0169 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10860-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42798 · Nota
• http://ikiwiki.info/security/#index33h2 · Nota
• https://suse.com/security/cve/CVE-2008-0169 · Nota
• https://suse.com/security/cve/CVE-2012-0220 · Nota
• https://suse.com/security/cve/CVE-2016-1238 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0169 · Nota de Segurança
• http://secunia.com/advisories/30468 · Aviso do Fabricante