PT-2025-5362 · Jetbrains · Jetbrains Hub

Name of the Vulnerable Software and Affected Versions: JetBrains Hub versions prior to 2024.3.55417 Description: The issue allows for privilege escalation through LDAP authentication mapping. Recommendations: For versions prior to 2024.3.55417, update to version 2024.3.55417 or later to resolve t...

Race Condition

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Race Condition during the LDAP authentication process. An attacker can hijack another user's session by initiating multiple simultaneous login attempts. Remediation Upgrade pgadmin4 to version 7.0 or highe...

CVE-2023-1907 Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

pgAdmin 安全漏洞

pgAdmin is pgAdmin open source an open source management and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin that stems from the fact that a user logged into pgAdmin running in server mode using LDAP authentication may attach to another...

SUSE CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

CVE-2024-11320

Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through =777.4...

CVE-2024-10127

Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the LDAP server itself had the vulnerable configuration...

CVE-2024-8777

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

PT-2024-39243 · Syscom · Omflow

Name of the Vulnerable Software and Affected Versions: OMFLOW from The SYSCOM Group affected versions not specified Description: The issue allows unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

SolarWinds Access Rights Manager ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ChangeHumster class. The issue results from an exposed dangerous...

Dogtag PKI Security Vulnerability

Dogtag PKI is an enterprise-grade, open source Certificate Authority CA open sourced by Dogtag. A security vulnerability exists in Dogtag PKI that stems from a security hole in dogtag-pki and pki-core that can be exploited to bypass the token authentication scheme via LDAP injection, which can be...

CVE-2024-5227

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...

CVE-2024-4129: Improper Authentication

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

PT-2024-29348 · Snow · Snow License Manager

Name of the Vulnerable Software and Affected Versions: Snow License Manager versions 9.33.2 through 9.34.0 Description: The issue is related to an Improper Authentication vulnerability that allows a networked attacker to bypass authentication in Snow License Manager on Windows when Active Directo...

Logpoint 安全漏洞

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.1.0 that stems from the presence of cross-site scripting XSS on the LDAP authentication page...

CVE-2023-25681

LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID...

The vulnerability of the LDAP authentication implementation in the software platform based on git for collaborative code development on GitLab allows a hacker to bypass the password of an arbitrary user and gain access to the system.

The vulnerability of the LDAP authentication implementation in the software platform based on git for collaborative code development on GitLab is related to the possibility of password reset due to insufficient access control. Exploiting this vulnerability could allow a malicious actor to reset t...

F5 F5OS Security Vulnerability

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 appliances to support its Application Delivery Control and Security features. A security vulnerability exists in F5 F5OS that stems from an unassigned role remote user being incorrectly authorized when configuring LDAP...

Rockwell Automation FactoryTalk Services Platform 数据伪造问题漏洞

Rockwell Automation FactoryTalk Services Platform is a suite of services platforms from Rockwell Automation, USA, consisting of multiple products that provide applications with routine services such as diagnostic information, health monitoring, and real-time data access. A security vulnerability...