VDB
CVE-2017-0356
CVE-2017-0356
PUBLISHED
A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.
EPSS 3.46% · 87.9th percentile
Risk Scores
EPSS Score
3.46%
87.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | ikiwiki | 0, 3.20160121, 3.20150614 |
Timeline
- Apr 13, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- Apr 25, 2023 EPSS Score
- May 13, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-0356 third-party-advisory
- https://ikiwiki.info/security/#cve-2017-0356 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-0356 third-party-advisory