PT-2009-6274 · Myphile · Myphile

Published 2009-11-27 · Updated 2017-08-17 · CVE-2009-4095

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions myPhile version 1.2.1

Description The issue allows remote attackers to bypass authentication by using an empty password.

Recommendations For myPhile version 1.2.1, update the software to a version that includes a fix for this issue, ensuring that authentication mechanisms are properly enforced to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-4095

Affected Products

Myphile

References · 5

• http://secunia.com/advisories/37322 · Vendor Advisory
• http://companionway.net/files/myphile · Vendor Advisory
• http://vupen.com/english/advisories/2009/3289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4095 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54350 · Note