CVE-2010-1596

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Published: Apr 29, 2010
Updated: Apr 13, 2023
CVE: CVE-2010-1596
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-287

OWASP TOP 10:

A2 - Broken Authentication

Affected Software
References

Software	From	Fixed in
sitracker / support_incident_tracker	3.45-beta1	3.45-beta1.x
sitracker / support_incident_tracker	3.35	3.35.x
sitracker / support_incident_tracker	3.30	3.30.x
sitracker / support_incident_tracker	3.33	3.33.x
sitracker / support_incident_tracker	3.41	3.41.x
sitracker / support_incident_tracker	3.22	3.22.x
sitracker / support_incident_tracker	3.32	3.32.x
sitracker / support_incident_tracker	3.30-beta2	3.30-beta2.x
sitracker / support_incident_tracker	3.36	3.36.x
sitracker / support_incident_tracker	3.21	3.21.x
sitracker / support_incident_tracker	3.31	3.31.x
sitracker / support_incident_tracker	3.50-beta1	3.50-beta1.x
sitracker / support_incident_tracker	3.24	3.24.x
sitracker / support_incident_tracker	3.40-beta1	3.40-beta1.x
sitracker / support_incident_tracker	-	3.50.x
sitracker / support_incident_tracker	3.35-beta1	3.35-beta1.x
sitracker / support_incident_tracker	3.40	3.40.x
sitracker / support_incident_tracker	3.22pl1	3.22pl1.x
sitracker / support_incident_tracker	3.45	3.45.x
sitracker / support_incident_tracker	3.23	3.23.x
sitracker / support_incident_tracker	3.24-beta-2	3.24-beta-2.x

Vulnerability Database

CVE-2010-1596