CVE-2025-48027CWE-290

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver

Medium · published May 15, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00307 · 22.3th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2025-05-15T00:00Z
EPSS history
Timeline
  • 15 MAY 00:00Z
    The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver
    cvelistv5