This script is Copyright (C) 2017 Tenable Network Security, Inc.
The remote FreeBSD host is missing a security-related update.
ikiwiki reports :
The ikiwiki maintainers discovered further flaws similar to
CVE-2016-9646 in the passwordauth plugin's use of CGI::FormBuilder,
with a more serious impact :
An attacker who can log in to a site with a password can log in as a
different and potentially more privileged user.
An attacker who can create a new account can set arbitrary fields in
the user database for that account
See also :
Update the affected package.
Risk factor :