Lucene search
PRIOn knowledge basePRION:CVE-2019-5648HistoryMar 12, 2020 - 1:15 p.m.
Code injection
2020-03-1213:15:00
PRIOn knowledge base
www.prio-n.com
6
Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be used by any authenticated administrative user to expose the LDAP credentials configured in the LDAP connector over the network.
| CPE | Name | Operator | Version |
|---|---|---|---|
| load_balancer_adc_firmware | le | 6.4 |
Related
cve
cve
CVE-2019-5648
2020-03-12 13:15:12
cvelist
cvelist
CVE-2019-5648 LDAP Credential Exposure in Barracuda Load Balancer ADC
2020-03-05 00:00:00
nvd
nvd
CVE-2019-5648
2020-03-12 13:15:12