Security Advisory

CVE-2014-0097

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-05-25 17:00:00

Last updated 2024-08-06 09:05:38

Assigner dell

State PUBLISHED

Description

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

← Browse all CVEs View on cve.org ↗