CVE-2008-0169: Ikiwiki

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence.

Affected products

• Ikiwiki Ikiwiki: version 1.5 only; version 1.34 only; version 1.34.1 only; version 1.34.2 only; version 1.35 only; version 1.36 only; …

Published 2008-06-03. Last modified 2026-06-16.