The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ikiwiki | Jul 30, 2024 | Jun 3, 2008 |
| Freebsd | — | Upgrade ikiwiki | Dec 10, 2025 | May 31, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub