tocsin

Debian/dokuwiki: unknown

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character

Action: Upgrade dokuwiki to 0.0.20140929.a-1 or later.

Affected

introducedfixedlast affected
00.0.20140929.a-1-

Fixed versions

0.0.20140929.a-1

Sources

published · modified · JSON