SecuritySpace - CVE-2010-1670

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-1670

Description: Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated with logins that use the single sign-on (SSO) functionality, which allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information.

Test IDs: 1.3.6.1.4.1.25623.1.1.1.1.2010.2067

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-1670
BugTraq ID: 41319
http://www.securityfocus.com/bid/41319
http://secunia.com/advisories/40431

CVE ID:	CVE-2010-1670
Description:	Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated with logins that use the single sign-on (SSO) functionality, which allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.1.2010.2067
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1670 BugTraq ID: 41319 http://www.securityfocus.com/bid/41319 http://secunia.com/advisories/40431