CVEvulnerability

CVE-2010-1596

6.8 MEDIUM Published 2010-04-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-04-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Affected configurations

• sitracker support incident tracker (<= 3.50) • sitracker support incident tracker 3.21 • sitracker support incident tracker 3.22 • sitracker support incident tracker 3.22pl1 • sitracker support incident tracker 3.23 • sitracker support incident tracker 3.24 • sitracker support incident tracker 3.30 • sitracker support incident tracker 3.31 • sitracker support incident tracker 3.32 • sitracker support incident tracker 3.33 • sitracker support incident tracker 3.35 • sitracker support incident tracker 3.36 • sitracker support incident tracker 3.40 • sitracker support incident tracker 3.41 • sitracker support incident tracker 3.45 • sitracker support incident tracker 3.50

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References