Security Advisory

CVE-2010-1670

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-07-06 17:00:00

Last updated 2024-09-16 20:22:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated with logins that use the single sign-on (SSO) functionality, which allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information.

← Browse all CVEs View on cve.org ↗