Design/Logic Flaw

2014-02-1415:55:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.

CPENameOperatorVersion
jboss_operations_networkeq3.0
jboss_operations_networkle2.4.1
jboss_operations_networkeq2.3.1
jboss_operations_networkeq2.4
jboss_operations_networkeq2.0.1
jboss_operations_networkeq2.1.0
jboss_operations_networkeq2.3
jboss_operations_networkeq2.0.0
jboss_operations_networkeq2.2

Name	Operator	Version
jboss_operations_network	eq	3.0
jboss_operations_network	le	2.4.1
jboss_operations_network	eq	2.3.1
jboss_operations_network	eq	2.4
jboss_operations_network	eq	2.0.1
jboss_operations_network	eq	2.1.0
jboss_operations_network	eq	2.3
jboss_operations_network	eq	2.0.0
jboss_operations_network	eq	2.2