Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/symfony/security-core@3.0.0-alpha
Typecomposer
Namespacesymfony
Namesecurity-core
Version3.0.0-alpha
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.0.6
Latest_non_vulnerable_version4.0.7
Affected_by_vulnerabilities
0
url VCID-14k5-2gnt-8qgd
vulnerability_id VCID-14k5-2gnt-8qgd
summary 
Unauthorized access on a misconfigured LDAP server
There's a flaw in `LdapBindAuthenticationProvider` that allows for an unauthorized access on a misconfigured LDAP server when using an empty password. Applications are affected only if they use the LDAP authentication provider.
references
0
reference_url https://github.com/symfony/symfony/pull/18736
reference_id
reference_type
scores
url https://github.com/symfony/symfony/pull/18736
1
reference_url https://symfony.com/cve-2016-2403
reference_id CVE-2016-2403
reference_type
scores
url https://symfony.com/cve-2016-2403
2
reference_url http://symfony.com/blog/cve-2016-2403-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password
reference_id CVE-2016-2403-UNAUTHORIZED-ACCESS-ON-A-MISCONFIGURED-LDAP-SERVER-WHEN-USING-AN-EMPTY-PASSWORD
reference_type
scores
url http://symfony.com/blog/cve-2016-2403-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password
fixed_packages
0
url pkg:composer/symfony/security-core@3.0.6
purl pkg:composer/symfony/security-core@3.0.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.0.6
aliases CVE-2016-2403
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-14k5-2gnt-8qgd
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-core@3.0.0-alpha