CVE-2010-1596

Published: Apr 28, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Affected (21)

Products: Sitracker: Support Incident Tracker

Sitracker

1 product

Support Incident Tracker

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Sitracker Support Incident Tracker	Up to 3.50
Sitracker Support Incident Tracker	Version 3.21
Sitracker Support Incident Tracker	Version 3.22
Sitracker Support Incident Tracker	Version 3.22pl1
Sitracker Support Incident Tracker	Version 3.23
Sitracker Support Incident Tracker	Version 3.24
Sitracker Support Incident Tracker	Version 3.24 beta-2
Sitracker Support Incident Tracker	Version 3.30
Sitracker Support Incident Tracker	Version 3.30 beta2
Sitracker Support Incident Tracker	Version 3.31
Sitracker Support Incident Tracker	Version 3.32
Sitracker Support Incident Tracker	Version 3.33
Sitracker Support Incident Tracker	Version 3.35
Sitracker Support Incident Tracker	Version 3.35 beta1
Sitracker Support Incident Tracker	Version 3.36
Sitracker Support Incident Tracker	Version 3.40
Sitracker Support Incident Tracker	Version 3.40 beta1
Sitracker Support Incident Tracker	Version 3.41
Sitracker Support Incident Tracker	Version 3.45
Sitracker Support Incident Tracker	Version 3.45 beta1
Sitracker Support Incident Tracker	Version 3.50 beta1