Home / Vulnerability Database / PHP : Unsafe authentication
PHP
PHP : Unsafe authentication
Classification
OWASP Top 10 2017
OWASP Top 10 2021
CWE/SANS Top 25 2021
Overview
Application implements insecure authentication. This can cause unauthorized access to the system.
One of the LDAP authentication methods is simple authentication. It allows the user to use their login and password to confirm their identity. Simple authentication method uses request options:
- Anonymous authentication request (Login only).
- Unauthenticated authentication request (Free connection, no login and password).
- Authentication request with login and password.
In the first and second cases, it is possible to access information without a password. The use of these authentication requests is insecure.
References
MEDIUM
DerScanner Severity Score
Do you want to fix PHP : Unsafe authentication in your application?
See also
PHP
PHP : Null salt
PHP
PHP : Empty password
PHP
