PT-2009-6274 · Myphile · Myphile

Publicado 2009-11-27 · Atualizado 2017-08-17 · CVE-2009-4095

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions myPhile version 1.2.1

Description The issue allows remote attackers to bypass authentication by using an empty password.

Recommendations For myPhile version 1.2.1, update the software to a version that includes a fix for this issue, ensuring that authentication mechanisms are properly enforced to prevent unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2009-4095

Produtos afetados

Myphile

Referências · 5

• http://secunia.com/advisories/37322 · Aviso do Fabricante
• http://companionway.net/files/myphile · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3289 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4095 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54350 · Nota