VULNERABILITY INTELLIGENCE

CVE-2011-4068

CVSS score9.8 CRITICAL

EPSS probability1.51%

CISA KEVNot currently listed

Published2018-02-01

Last modified2026-06-16

Description

The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password.