Authentication flaw

2022-08-1220:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password.

CPENameOperatorVersion
yugabytedbeq2.6.1

CPE	Name	Operator	Version
	yugabytedb	eq	2.6.1

References

www.yugabyte.com/