Security Advisory

CVE-2010-2944

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-08-20 19:00:00
Last updated 2024-09-16 23:26:28
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges.