License verification mechanism can be bypassed
Low
E
ExpressionEngine
Submitted None
Team Summary
Official summary from ExpressionEngine
@unbaiat discovered that an invalid license file could be accepted as valid in certain circumstances. @unbaiat gave a detailed report with step-by-step instructions for replicating, enabling a speedy resolution to the issue.
Actions:
Reported by
unbaiat
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Use of a Broken or Risky Cryptographic Algorithm