{"action":"Upgrade pear/auth to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"},{"fixed":"1.3.0r4","introduced":"1.3.0r1"}],"component":"pear/auth","cve_ids":["CVE-2006-0868"],"ecosystem":"Packagist","epss":0.02507,"exploited":false,"fixed_versions":["1.2.4","1.3.0r4"],"ghsa_id":"GHSA-76rh-xv36-9mrc","id":"tcs_01M5KEXRTKT855Y4KDP9PAY90Y","modified_at":"2024-12-05T05:26:48.018821Z","published_at":"2022-05-01T06:43:23Z","references":["https://osv.dev/vulnerability/GHSA-76rh-xv36-9mrc","https://nvd.nist.gov/vuln/detail/CVE-2006-0868","https://exchange.xforce.ibmcloud.com/vulnerabilities/24854","https://github.com/pear/Auth","https://web.archive.org/web/20060315074736/http://securitytracker.com/alerts/2006/Feb/1015666.html","https://web.archive.org/web/20060408105851/http://www.securityfocus.com/bid/16758","https://web.archive.org/web/20201207144810/http://www.securityfocus.com/archive/1/425796/100/0/threaded","http://pear.php.net/package/Auth/download/1.2.4","http://pear.php.net/package/Auth/download/1.3.0r4","http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-76rh-xv36-9mrc","url":"https://osv.dev/vulnerability/GHSA-76rh-xv36-9mrc"}],"summary":"PEAR::Auth potential authentication bypass vulnerability"}