ID | CVE-2014-3781 | ||||||
Sažetak | The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an empty password in an XML-RPC request. | ||||||
Reference | |||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:M/Au:N/C:P/I:P/A:N | ||||||
Zadnje važnije ažuriranje | 12-06-2014 - 15:51 | ||||||
Objavljeno | 11-06-2014 - 14:55 |