CVE-2014-8764: Medium severity mageia vulnerability
DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character, which triggers an anonymous bind.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8764?
CVE-2014-8764 is considered a high severity vulnerability due to its potential for unauthorized access.
How does CVE-2014-8764 allow attackers to bypass authentication?
CVE-2014-8764 allows attackers to bypass authentication by using a user name and password that starts with a null character.
Which versions of DokuWiki are affected by CVE-2014-8764?
CVE-2014-8764 affects all versions of DokuWiki up to and including 2013-12-08.
How can I mitigate the risks associated with CVE-2014-8764?
To mitigate the risks of CVE-2014-8764, upgrade to a version of DokuWiki released after 2013-12-08 that addresses this vulnerability.
Is CVE-2014-8764 specific to any operating systems?
CVE-2014-8764 specifically affects Mageia versions 3.0 and 4.0, along with DokuWiki.