CVE-2017-0356

Authentication bypass via repeated parameters

State: Published
Severity: Not scored
Published: Apr 13, 2018
Updated: Sep 17, 2024
Reserved: Nov 29, 2016

Description

A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ikiwikiikiwiki	before 3.20170111Affected

References

DSA-3760vendor-advisory
https://ikiwiki.info/security/#cve-2017-0356
[oss-security] 20170112 ikiwiki: CVE-2017-0356: Authentication bypass via repeated parametersmailing-list
95420vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.