Lucene search

K
cvelistRedhatCVELIST:CVE-2010-2940
HistoryAug 30, 2010 - 7:00 p.m.

CVE-2010-2940

2010-08-3019:00:00
redhat
www.cve.org
6

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

81.2%

The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

81.2%