The vulnerability of the `ksmbd_vfs_stream_read()` function in the KSMBD daemon of the Linux operating system allows a hacker to disclose protected information and cause service failures.

The vulnerability of the ksmbdvfsstreamread function in the KSMBD daemon of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information and cause service failures by...

CVE-2025-0604 Keycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloak

A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keycloak, bypassing AD...

CVE-2023-0922

...

OpenText eDirectory 安全漏洞

OpenText eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from OpenText Canada. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A security...

OpenText eDirectory 安全漏洞

OpenText eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from OpenText Canada. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A security...

CVE-2023-7249

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1...

CVE-2023-7249

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1...

CVE-2023-7249

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1...

CVE-2023-7249

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1...

CVE-2023-7249

CVE-2023-7249 concerns OpenText Directory Services (OTDS). The issue is an improper limitation of a pathname to a restricted directory, i.e., a path traversal vulnerability in OTDS that could allow access to restricted paths. Affected product/version: OpenText Directory Services 16.4.2 through 24...

OpenText Directory Services 安全漏洞

OpenText Directory Services OTDS is an information management solution from OpenText Canada Inc. integrates OpenText products and solutions with the company's enterprise directory infrastructure. A security vulnerability exists in OpenText Directory Services version 16.4.2 through versions prior ...

PT-2024-15250 · Opentext · Opentext Directory Services

Name of the Vulnerable Software and Affected Versions: OpenText Directory Services versions 16.4.2 through 24.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows Path Travers...

CVE-2024-7050

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2...

CVE-2024-7050

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2...

CVE-2024-7050

Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue affects OpenText Directory Services: 24.2...

CVE-2024-7050

CVE-2024-7050 concerns OpenText Directory Services (OTDS) v24.2, describing an Improper Authentication vulnerability that may allow a Multi-factor Authentication bypass in certain scenarios. Multiple connected sources corroborate the issue in OTDS 24.2; remediation guidance appears in PT-2024-380...

PT-2024-38045 · Opentext · Opentext Directory Services

Name of the Vulnerable Software and Affected Versions: OpenText Directory Services version 24.2 Description: The issue is related to an Improper Authentication vulnerability that may allow Multi-factor Authentication Bypass in specific scenarios. Recommendations: For OpenText Directory Services...

OpenText Directory Services 安全漏洞

OpenText Directory Services OTDS is an information management solution from OpenText USA, Inc. integrates OpenText products and solutions with the company's enterprise directory infrastructure. A security vulnerability exists in OpenText Directory Services version 24.2 that stems from improper...

389-ds-base Security Vulnerability

389-ds-base is a highly available, fully featured, reliable and secure LDAP server implementation. It handles many of the largest LDAP deployments in the world. A security vulnerability exists in 389-ds-base that stems from allowing an authenticated user to use a hashed password containing a...

CVE-2023-36655

The login REST API in ProLion CryptoSpike 3.0.15P2 when LDAP or Active Directory is used as the users store allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination...