CVE-2011-4068

The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password.

• CWE-287

• https://packetfence.org/bugs/changelog_page.php?version_id=35Issue Tracking, Vendor Advisory
• https://packetfence.org/bugs/view.php?id=1293Patch, Vendor Advisory
• https://packetfence.org/bugs/changelog_page.php?version_id=35Issue Tracking, Vendor Advisory
• https://packetfence.org/bugs/view.php?id=1293Patch, Vendor Advisory

Published

Feb 1, 2018

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4060The runtime linker in QNX Neutrino RTOS 6.5.0 before Service…
• CVE-2011-4061Multiple untrusted search path vulnerabilities in (1) db2rsp…
• CVE-2011-4062Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1…
• CVE-2011-4063chan_sip.c in the SIP channel driver in Asterisk Open Source…
• CVE-2011-4064Cross-site scripting (XSS) vulnerability in the setup interf…
• CVE-2011-4066SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.0…
• CVE-2011-4069html/admin/login.php in PacketFence before 3.0.2 allows remo…
• CVE-2011-4072Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-4073Use-after-free vulnerability in the cryptographic helper han…
• CVE-2011-4074Cross-site scripting (XSS) vulnerability in cmd.php in phpLD…
• CVE-2011-4075The masort function in lib/functions.php in phpLDAPadmin 1.2…
• CVE-2011-4076OpenStack Nova before 2012.1 allows someone with access to a…5.9