CVE-2024-39848

Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web Service...

CVE-2024-39848

Internet2 Grouper versions prior to 5.6 and Grouper for Web Services before 4.13.1 are vulnerable to an authentication bypass when LDAP authentication is used in specific ways. The root cause is located in the internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication class and involves...