medium6.8
CVE-2010-1596
Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty passwo…
Impact
Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitracker | Support Incident Tracker | through 3.50 Versions 3.21, 3.22, 3.22pl1, 3.23, 3.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.sitracker.org/view.php?id=1047
- http://osvdb.org/61945
- http://secunia.com/advisories/38329
- http://sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292
- http://sitracker.org/wiki/ReleaseNotes351
- http://www.securityfocus.com/bid/37949
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55871
- http://bugs.sitracker.org/view.php?id=1047
- http://osvdb.org/61945
- http://secunia.com/advisories/38329
- http://sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292
- http://sitracker.org/wiki/ReleaseNotes351
- http://www.securityfocus.com/bid/37949
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55871