CVE-2016-7145
CRITICALNefarious2 - Authentication Bypass
Title source: ruleDescription
The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.
Scores
CVSS v3
9.8
EPSS
0.0036
EPSS Percentile
57.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
nefarious2_project/nefarious2
Timeline
Published
Mar 07, 2017
Tracked Since
Feb 18, 2026