Security Advisory

CVE-2017-0356

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-13 15:00:00
Last updated 2024-09-17 02:51:42
Assigner debian
CVSS score not scored
State PUBLISHED

Description

A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.