Lucene search
HistoryFeb 10, 2015 - 8:59 p.m.
CVE-2015-1169
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.019
Percentile
88.6%
Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.
Affected configurations
Node
apereocentral_authentication_serviceRange≤3.5.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apereo | central_authentication_service | * | cpe:2.3:a:apereo:central_authentication_service:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-1169
2015-02-10 20:00:00
packetstorm
packetstorm
CAS Server 3.5.2 LDAP Authentication Bypass
2015-01-22 00:00:00
zdt
zdt
CAS Server 3.5.2 LDAP Authentication Bypass Vulnerability
2015-01-22 00:00:00
cve
cve
CVE-2015-1169
2015-02-10 20:59:01
prion
prion
Authentication flaw
2015-02-10 20:59:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.019
Percentile
88.6%
Related for NVD:CVE-2015-1169