Dotclear Authentication Bypass Vulnerability (CVE-2014-3781)

Release date:
Updated on:

Affected Systems:
Dotclear <2.6.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67560
CVE (CAN) ID: CVE-2014-3781
 
DotClear is a Blog system based on PHP and MySQL.
 
Dotclear 2.6.2 and earlier versions have the Authentication Bypass Vulnerability. Attackers can exploit this vulnerability to bypass the authentication mechanism and perform unauthorized operations.
 
<* Source: Egidio Romano
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Dotclear
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3

This article permanently updates the link address: