Cross site request forgery (csrf)

ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...

CVE-2020-15259

ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...

CVE-2020-15259 CSRF in Auth0 ad-ldap-connector

ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...

CVE-2020-15259

The CVE-2020-15259 issue affects the ad-ldap-connector admin panel prior to version 5.0.13. The root cause is missing CSRF protection, which could allow CSRF payloads loaded from a malicious page on the same machine to interact with the admin console, potentially causing remote code execution or ...

CVE-2020-15259: Cross-Site Request Forgery (CSRF)

ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...

PT-2020-14320

Name of the Vulnerable Software and Affected Versions ad-ldap-connector versions prior to 5.0.13 Description The issue concerns a lack of CSRF protection in the admin panel, which can be exploited to achieve remote code execution or result in confidential data loss. This can occur when a user...

CVE-2020-5281 LDAP connector injection in Perun

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input...

CVE-2019-5648: Insufficiently Protected Credentials

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

CVE-2020-9330: Missing Authentication for Critical Function

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices e.g., by using default credentials can change the LDAP connection IP...

HP Select Identity unauthorized access

Unauthorized access via Active Directory Bidirectional LDAP Connector...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

HP Select Identity Active Directory Bidirectional LDAP Connector vulnerable to remote arbitrary code execution in versions 2.20, 2.20.001, 2.20.002 and 2.30. The HP Security Bulletin (HPSBMA02346 rev.2) confirms a remote unauthorized access risk and provides patches (BiDir ActiveDir Connector 2.3...

CVE-2008-1665

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

HP Select Identity Bidrectional LDAP Connector远程未授权访问漏洞

BUGTRAQ ID: 30250 CVE ID：CVE-2008-1665 CNCVE ID：CNCVE-20081665 HP Select Identity是一款身份认证管理应用解决方案。 HP Select Identity Bidrectional LDAP Connector存在一个未明未授权访问漏洞，远程攻击者可以利用漏洞未授权访问目标应用系统。 目前没有详细漏洞细节提供。 HP HPSI Active Directory Bidirectional LDAP Connector 2.20.2 HP HPSI Active Directory Bidirectional...