~ / search / GHSA-76rh-xv36-9mrc

GHSA-76rh-xv36-9mrc

PEAR::Auth potential authentication bypass vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2006-0868

Packages

EcosystemPackageAffectedFixed in
Packagist pear/auth < 1.2.4 1.2.4
Packagist pear/auth >= 1.3.0r1, < 1.3.0r4 1.3.0r4

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

References

External links from the advisory. They lead to third-party sites.