Home / Vulnerability Database / PHP : Unsafe authentication
PHP

PHP : Unsafe authentication

Classification

Overview

Application implements insecure authentication. This can cause unauthorized access to the system.

One of the LDAP authentication methods is simple authentication. It allows the user to use their login and password to confirm their identity. Simple authentication method uses request options:

  1. Anonymous authentication request (Login only).
  2. Unauthenticated authentication request (Free connection, no login and password).
  3. Authentication request with login and password.

In the first and second cases, it is possible to access information without a password. The use of these authentication requests is insecure.

MEDIUM

DerScanner Severity Score

Do you want to fix PHP : Unsafe authentication in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt