Security Advisory
CVE-2012-5604
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.