CyberRota Analysis
AI-GeneratedVersions 3.1.0 through 4.1.6 of phpMyFAQ are vulnerable to an authentication bypass, allowing users with blocked local accounts to regain access by authenticating via LDAP, as the system improperly sets their status to 'active' without logging this change. This flaw poses a significant security risk, as it enables unauthorized access to potentially sensitive information. Organizations using affected versions, particularly those relying on LDAP for authentication, should prioritize upgrading to version 4.1.7 to mitigate this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authentication is enabled, after a successful LDAP bind the code calls User::setStatus('active') unconditionally, which overwrites the account_status column of a pre-existing local account from 'blocked' to 'active'. As a result, a user whose local phpMyFAQ account has been administratively blocked can restore their account and log in by authenticating via LDAP. The state transition is not logged, so administrators cannot detect that the block was overridden. Fixed in 4.1.7.
Related CVEs
Other vulnerabilities affecting the same vendor(s)