Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.
The product compares two entities in a security-relevant context, but the comparison is incorrect.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webuzo | Softaculous | * | 4.2.9 (excluding) |
This Pillar covers several possibilities: