FreeNAS Blank Password Authentication Bypass Vulnerability
BID:69249
CVE-2014-5334 |Info
FreeNAS Blank Password Authentication Bypass Vulnerability
| Bugtraq ID: | 69249 |
| Class: | Design Error |
| CVE: |
CVE-2014-5334 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 18 2014 12:00AM |
| Updated: | Aug 19 2014 10:44AM |
| Credit: | Kurt Seifried |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
FreeNAS Blank Password Authentication Bypass Vulnerability
FreeNAS is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to gain unauthorized access to the affected application.
FreeNAS 9.2.1.7 is vulnerable; other versions may also be affected.
FreeNAS is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to gain unauthorized access to the affected application.
FreeNAS 9.2.1.7 is vulnerable; other versions may also be affected.
Exploit / POC
FreeNAS Blank Password Authentication Bypass Vulnerability
An attacker can exploit this issue through a browser.
An attacker can exploit this issue through a browser.
Solution / Fix
FreeNAS Blank Password Authentication Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].