CVE:CVE-2011-4068
CNNVD:CNNVD-201802-010
PacketFence是一套开源的网络访问控制解决方案。
PacketFence 3.0.2之前版本中的html/admin/login.php文件的‘check_password’函数存在安全漏洞。远程攻击者可借助空密码利用该漏洞绕过身份验证。
solution:Upgrade packetfence packetfence to a higher version than 3.0.1,and avoid the version (,3.0.1]