CVE-2010-1596

Sitracker Support Incident Tracker < 3.50 - Authentication Bypass

Title source: rule

Description

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

References (7)

[Various Sources] http://bugs.sitracker.org/view.php?id=1047

[Vendor Advisory] http://secunia.com/advisories/38329

[Various Sources] http://sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292

[Patch] http://sitracker.org/wiki/ReleaseNotes351

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/55871

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/37949

[Third Party Advisory, VDB Entry] http://osvdb.org/61945

Scores

EPSS 0.0044

EPSS Percentile 63.0%

Classification

CWE

CWE-287

Status draft

Affected Products (21)

sitracker/support_incident_tracker < 3.50

sitracker/support_incident_tracker

... and 6 more

Timeline

Published Apr 28, 2010

Tracked Since Feb 18, 2026