CVE-2026-71879:详情

CVE-2026-71879

2026-08-18
18h19 +00:00
A07-Identif. and Authent. Fail
2026-10-22
22h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-288 Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.

参考资料