CVEvulnerability

CVE-2014-4168

5.0 MEDIUM Published 2014-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287

Description

(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering.

Affected configurations

• kryo iodine (<= 0.6.0) • kryo iodine 0.3.0 • kryo iodine 0.3.1 • kryo iodine 0.3.2 • kryo iodine 0.3.3 • kryo iodine 0.3.4 • kryo iodine 0.4.0 • kryo iodine 0.4.1 • kryo iodine 0.4.2 • kryo iodine 0.5.0 • kryo iodine 0.5.1 • kryo iodine 0.5.2

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References