CVE-2004-2254

SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a…

published July 17, 2005

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08388 · 94.9th percentile
Published
2005-07-17T04:00Z
EPSS history
Timeline
  • 17 JUL 04:00Z
    SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a…
    cvelistv5