Denial Of Service (DoS)

krb5 is vulnerabl eto denial of service. Multiple NULL pointer dereference and assertion failure flaws were found in the MIT Kerberos KDC when it was configured to use an LDAP Lightweight Directory Access Protocol or Berkeley Database Berkeley DB back end. A remote attacker could use these flaws ...

Denial Of Service (DoS)

krb5 is vulnerable to denial of service DoS. The vulnerability exists as multiple NULL pointer dereference and assertion failure flaws were found in the MIT Kerberos KDC when it was configured to use an LDAP Lightweight Directory Access Protocol or Berkeley Database Berkeley DB back end. A remote...

CVE-2019-5648

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

The vulnerability of the LDAP server component in Samba’s network communication software allows a hacker to induce a service failure.

The vulnerability of the Samba network communication component’s LDAP server is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2019-6195

An authorization bypass exists in Lenovo XClarity Controller XCC versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1 “LDAP Authentication Only with Local...

IBM Security Directory Server Access Control Error Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. IBM Security Directory Server, version 6.4.0, has a security...

The vulnerability of the OIM component – LDAP users and role synchronization of the Oracle Identity Manager’s identification system – allows attackers to expose protected information.

The vulnerability of the OIM component – LDAP user and role synchronization of the Oracle Identity Manager – is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using the HTTP protocol...

CVE-2019-19413

There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash...

CVE-2019-9538

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling...

NeuVector Authentication Vulnerability

NeuVector is an end-to-end container security platform from US-based NeuVector. The platform includes features such as image vulnerability management, access control and container process/filesystem protection. A security vulnerability exists in NeuVector version 3.1. The vulnerability can be...

Red Hat Keycloak Authorization Issue Vulnerability (CNVD-2020-00257)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An authorization issue vulnerability exists in Red Hat Keycloak version 7.x, which can be exploited by an attacker to perform LDAP authenticati...

CVE-2019-6675

BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromise of the system. This issue only impacts specific...

The vulnerability of the LDAP library in the Solaris operating system, which allows a hacker to cause a partial service failure

The vulnerability of the LDAP library in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a partial service outage...

CVE-2019-15626

The Deep Security Manager application Versions 10.0, 11.0 and 12.0, when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability...

Limesurvey Username Enumeration Vulnerability

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A username enumeration vulnerability exists in Limesurvey versions prior to 3.17.14. This vulnerability can be exploited by a remote...

CVE-2019-5501

Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers...

UBUNTU-CVE-2015-7882

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities

According to its self-reported version, Cisco FXOS Software and Cisco NX-OS Software are affected by multiple vulnerabilities which could allow an unauthenticated, remote attacker to cause a denial of service attack DoS. The vulnerabilities are due to the improper parsing of LDAP packets by an...

CVE-2019-1697 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial ...

CVE-2019-1697 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial ...