Vulnerabilities > Gonicus > Gosa > 2019.04.11
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2019-08-15 | CVE-2019-11187 | Improper Authentication vulnerability in multiple products Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arbitrary password is provided. | 9.8 |