CyberRota Analysis
AI analysis pending.
CVE
CVE-2016-2403
Severity
CRITICAL
CVSS
9.8
EPSS
2.93%
Original NVD Description
Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind.