CVE-2014-8763: Medium severity dokuwiki vulnerability
DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null (\0) character and a valid user name, which triggers an unauthenticated bind.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8763?
CVE-2014-8763 is considered a high severity vulnerability due to its potential for allowing unauthenticated access.
What systems are affected by CVE-2014-8763?
CVE-2014-8763 affects DokuWiki before version 2014-05-05b and Mageia versions 3.0 and 4.0.
How can I fix CVE-2014-8763?
To fix CVE-2014-8763, upgrade to DokuWiki version 2014-05-05b or later, or apply any relevant patches for Mageia.
What is the exploit mechanism of CVE-2014-8763?
The exploit mechanism for CVE-2014-8763 involves using a password that starts with a null character, enabling attackers to bypass LDAP authentication.
Is it possible to mitigate CVE-2014-8763 without updating software?
Mitigation for CVE-2014-8763 without updating may include disabling LDAP authentication or using alternative authentication methods until a patch can be applied.