MEDIUM🇬🇧 English

CVE-2012-4741

CVSS 5.0v2.0pub. 2012-08-31upd. 2026-04-29

The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Packetfence

    APP
    Packetfence
    ≤ 3.2.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2011-4068CRITICAL9.8PL ✓ten sam produkt

PacketFence – pominięcie uwierzytelnienia przez puste hasło (Auth Bypass)

CVE-2011-4069CRITICAL9.8PL ✓ten sam produkt

LDAP injection w PacketFence umożliwiający ominięcie uwierzytelnienia

CVE-2012-4742HIGH7.5ten sam produkt

The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute a...

CVE-2012-4740MEDIUM4.3ten sam produkt

Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attac...