CVE-2011-4068

CRITICAL · CVSS 9.8 EPSS 1.51%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-02-01 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-4068

Severity

CRITICAL

CVSS

9.8

EPSS

1.51%

Original Filing — NVD Description

The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password.