Beveiligingsadvies

CVE-2026-41720

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-09 03:48:56

Laatst bijgewerkt 2026-06-23 20:47:25

Toegewezen door vmware

CVSS-score 7.4

Status PUBLISHED

Beschrijving

Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. Affected versions: Spring LDAP 2.4.0 through 2.4.4; 3.2.0 through 3.2.17; 3.3.0 through 3.3.7; 4.0.0 through 4.0.3.

← Alle CVE's bekijken Bekijk op cve.org ↗