Description
BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.
References
- 13302 third-party-advisory
- 11650 vdb-entry
- 12144 vdb-entry
- http://www.gotbnc.com/changes.html#2.9.1
- bnc-invalid-password-auth-bypass(18103) vdb-entry