Beveiligingsadvies

CVE-2015-1169

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-02-10 20:00:00
Laatst bijgewerkt 2024-08-06 04:33:20
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.