| Package | Affected versions | Patched versions |
|---|---|---|
| cardio server | = 3.3= 4.0= 4.1 |
The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free