CVE-2010-1596: Sitracker Support Incident Tracker

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

Affected products

• Sitracker Support Incident Tracker: up to and including 3.50; version 3.21 only; version 3.22 only; version 3.22pl1 only; version 3.23 only; version 3.24 only; …

Published 2010-04-28. Last modified 2026-06-16.