Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2018-18389
HistoryOct 16, 2018 - 6:29 p.m.

Improper access control

2018-10-1618:29:00
PRIOn knowledge base
www.prio-n.com
3

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization, allows an attacker to log into the server by sending any valid username with an arbitrary password.

CPENameOperatorVersion
neo4jge3.4.0
neo4jlt3.4.9

Related

osv 2
cvelist 1
veracode 1
nvd 1
github 1
cve 1
osv
osv
CVE-2018-18389
2018-10-16 18:29:01
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
2018-10-17 17:31:26
cvelist
cvelist
CVE-2018-18389
2022-10-03 16:22:03
veracode
veracode
Authorization Bypass
2018-10-17 09:49:19
nvd
nvd
CVE-2018-18389
2018-10-16 18:29:01
github
github
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
2018-10-17 17:31:26
cve
cve
CVE-2018-18389
2022-10-03 16:22:03

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON
Related for PRION:CVE-2018-18389
osv2cvelist1veracode1nvd1github1cve1