CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-11407

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-11407

Sensiolabs » Symfony » Version: 2.8.0

cpe:2.3:a:sensiolabs:symfony:2.8.0
Sensiolabs » Symfony » Version: 2.8.1

cpe:2.3:a:sensiolabs:symfony:2.8.1
Sensiolabs » Symfony » Version: 2.8.10

cpe:2.3:a:sensiolabs:symfony:2.8.10
Sensiolabs » Symfony » Version: 2.8.11

cpe:2.3:a:sensiolabs:symfony:2.8.11
Sensiolabs » Symfony » Version: 2.8.12

cpe:2.3:a:sensiolabs:symfony:2.8.12
Sensiolabs » Symfony » Version: 2.8.13

cpe:2.3:a:sensiolabs:symfony:2.8.13
Sensiolabs » Symfony » Version: 2.8.14

cpe:2.3:a:sensiolabs:symfony:2.8.14
Sensiolabs » Symfony » Version: 2.8.15

cpe:2.3:a:sensiolabs:symfony:2.8.15
Sensiolabs » Symfony » Version: 2.8.16

cpe:2.3:a:sensiolabs:symfony:2.8.16
Sensiolabs » Symfony » Version: 2.8.17

cpe:2.3:a:sensiolabs:symfony:2.8.17
Sensiolabs » Symfony » Version: 2.8.18

cpe:2.3:a:sensiolabs:symfony:2.8.18
Sensiolabs » Symfony » Version: 2.8.19

cpe:2.3:a:sensiolabs:symfony:2.8.19
Sensiolabs » Symfony » Version: 2.8.2

cpe:2.3:a:sensiolabs:symfony:2.8.2
Sensiolabs » Symfony » Version: 2.8.20

cpe:2.3:a:sensiolabs:symfony:2.8.20
Sensiolabs » Symfony » Version: 2.8.21

cpe:2.3:a:sensiolabs:symfony:2.8.21
Sensiolabs » Symfony » Version: 2.8.22

cpe:2.3:a:sensiolabs:symfony:2.8.22
Sensiolabs » Symfony » Version: 2.8.23

cpe:2.3:a:sensiolabs:symfony:2.8.23
Sensiolabs » Symfony » Version: 2.8.24

cpe:2.3:a:sensiolabs:symfony:2.8.24
Sensiolabs » Symfony » Version: 2.8.25

cpe:2.3:a:sensiolabs:symfony:2.8.25
Sensiolabs » Symfony » Version: 2.8.26

cpe:2.3:a:sensiolabs:symfony:2.8.26
Sensiolabs » Symfony » Version: 2.8.27

cpe:2.3:a:sensiolabs:symfony:2.8.27
Sensiolabs » Symfony » Version: 2.8.28

cpe:2.3:a:sensiolabs:symfony:2.8.28
Sensiolabs » Symfony » Version: 2.8.29

cpe:2.3:a:sensiolabs:symfony:2.8.29
Sensiolabs » Symfony » Version: 2.8.3

cpe:2.3:a:sensiolabs:symfony:2.8.3
Sensiolabs » Symfony » Version: 2.8.30

cpe:2.3:a:sensiolabs:symfony:2.8.30
Sensiolabs » Symfony » Version: 2.8.31

cpe:2.3:a:sensiolabs:symfony:2.8.31
Sensiolabs » Symfony » Version: 2.8.32

cpe:2.3:a:sensiolabs:symfony:2.8.32
Sensiolabs » Symfony » Version: 2.8.33

cpe:2.3:a:sensiolabs:symfony:2.8.33
Sensiolabs » Symfony » Version: 2.8.34

cpe:2.3:a:sensiolabs:symfony:2.8.34
Sensiolabs » Symfony » Version: 2.8.35

cpe:2.3:a:sensiolabs:symfony:2.8.35
Sensiolabs » Symfony » Version: 2.8.36

cpe:2.3:a:sensiolabs:symfony:2.8.36
Sensiolabs » Symfony » Version: 2.8.4

cpe:2.3:a:sensiolabs:symfony:2.8.4
Sensiolabs » Symfony » Version: 2.8.5

cpe:2.3:a:sensiolabs:symfony:2.8.5
Sensiolabs » Symfony » Version: 2.8.6

cpe:2.3:a:sensiolabs:symfony:2.8.6
Sensiolabs » Symfony » Version: 2.8.7

cpe:2.3:a:sensiolabs:symfony:2.8.7
Sensiolabs » Symfony » Version: 2.8.8

cpe:2.3:a:sensiolabs:symfony:2.8.8
Sensiolabs » Symfony » Version: 2.8.9

cpe:2.3:a:sensiolabs:symfony:2.8.9
Sensiolabs » Symfony » Version: 3.3.0

cpe:2.3:a:sensiolabs:symfony:3.3.0
Sensiolabs » Symfony » Version: 3.3.1

cpe:2.3:a:sensiolabs:symfony:3.3.1
Sensiolabs » Symfony » Version: 3.3.10

cpe:2.3:a:sensiolabs:symfony:3.3.10
Sensiolabs » Symfony » Version: 3.3.11

cpe:2.3:a:sensiolabs:symfony:3.3.11
Sensiolabs » Symfony » Version: 3.3.12

cpe:2.3:a:sensiolabs:symfony:3.3.12
Sensiolabs » Symfony » Version: 3.3.13

cpe:2.3:a:sensiolabs:symfony:3.3.13
Sensiolabs » Symfony » Version: 3.3.14

cpe:2.3:a:sensiolabs:symfony:3.3.14
Sensiolabs » Symfony » Version: 3.3.15

cpe:2.3:a:sensiolabs:symfony:3.3.15
Sensiolabs » Symfony » Version: 3.3.16

cpe:2.3:a:sensiolabs:symfony:3.3.16
Sensiolabs » Symfony » Version: 3.3.2

cpe:2.3:a:sensiolabs:symfony:3.3.2
Sensiolabs » Symfony » Version: 3.3.3

cpe:2.3:a:sensiolabs:symfony:3.3.3
Sensiolabs » Symfony » Version: 3.3.4

cpe:2.3:a:sensiolabs:symfony:3.3.4
Sensiolabs » Symfony » Version: 3.3.5

cpe:2.3:a:sensiolabs:symfony:3.3.5
Sensiolabs » Symfony » Version: 3.3.6

cpe:2.3:a:sensiolabs:symfony:3.3.6
Sensiolabs » Symfony » Version: 3.3.7

cpe:2.3:a:sensiolabs:symfony:3.3.7
Sensiolabs » Symfony » Version: 3.3.8

cpe:2.3:a:sensiolabs:symfony:3.3.8
Sensiolabs » Symfony » Version: 3.3.9

cpe:2.3:a:sensiolabs:symfony:3.3.9
Sensiolabs » Symfony » Version: 3.4.0

cpe:2.3:a:sensiolabs:symfony:3.4.0
Sensiolabs » Symfony » Version: 3.4.1

cpe:2.3:a:sensiolabs:symfony:3.4.1
Sensiolabs » Symfony » Version: 3.4.2

cpe:2.3:a:sensiolabs:symfony:3.4.2
Sensiolabs » Symfony » Version: 3.4.3

cpe:2.3:a:sensiolabs:symfony:3.4.3
Sensiolabs » Symfony » Version: 3.4.4

cpe:2.3:a:sensiolabs:symfony:3.4.4
Sensiolabs » Symfony » Version: 3.4.5

cpe:2.3:a:sensiolabs:symfony:3.4.5
Sensiolabs » Symfony » Version: 3.4.6

cpe:2.3:a:sensiolabs:symfony:3.4.6
Sensiolabs » Symfony » Version: 4.0.0

cpe:2.3:a:sensiolabs:symfony:4.0.0
Sensiolabs » Symfony » Version: 4.0.1

cpe:2.3:a:sensiolabs:symfony:4.0.1
Sensiolabs » Symfony » Version: 4.0.2

cpe:2.3:a:sensiolabs:symfony:4.0.2
Sensiolabs » Symfony » Version: 4.0.3

cpe:2.3:a:sensiolabs:symfony:4.0.3
Sensiolabs » Symfony » Version: 4.0.4

cpe:2.3:a:sensiolabs:symfony:4.0.4
Sensiolabs » Symfony » Version: 4.0.5

cpe:2.3:a:sensiolabs:symfony:4.0.5
Sensiolabs » Symfony » Version: 4.0.6

cpe:2.3:a:sensiolabs:symfony:4.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-11407

Products

Pricing

Contact Us