CVE-2018-1000809

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service

published October 8, 2018

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01689 · 76.9th percentile
Published
2018-10-08T15:00Z
EPSS history
Timeline
  • 08 OCT 15:00Z
    privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service
    cvelistv5