Skip to main content

Use of Wrong Operator in String Comparison

CVE-2021-4259

High
9.8/10

Summary

A vulnerability was found in phpRedisAdmin versions through 1.16.1. It has been classified as problematic. This affects the function "authHttpDigest" of the file "includes/login.inc.php". The manipulation of the argument response leads to the use of the wrong operator in string comparison. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216267.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-597 - Use of Wrong Operator in String Comparison

The product uses the wrong operator when comparing a string, such as using "==" when the .equals() method should be used instead.

References

Advisory Timeline

  • Published