CVE-2016-2403
Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthentic…
Published: 2017-02-07 · CVSS: Unscored
Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7