756 matches found
CVE-2023-4727 Ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
CVE-2023-4727
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
CVE-2023-4727
CVE-2023-4727 affects dogtag-pki and pki-core where token authentication can be bypassed via LDAP injection using sessionID=*, potentially enabling privilege escalation. Connected documents enumerate multiple vendor advisories and Nessus plugins reporting affected MiracleLinux, Alibaba Cloud Linu...
CVE-2023-4727 Ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
CVE-2023-4727
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
CVE-2024-37393
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...
GO-2024-2776 Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection in github.com/apache/trafficcontrol
Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection in github.com/apache/trafficcontrol...
Exploit for Cleartext Transmission of Sensitive Information in Securenvoy Multi-Factor_Authentication_Solutions
securenvoy-cve-2024-37393 RESPONSIBLE DISCLOSURE Vulnerabi...
CVE-2024-37393
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...
CVE-2024-37393
SecurEnvoy MFA has multiple LDAP injection vulnerabilities in versions before 9.4.514. The DESKTOP service at the /secserver HTTP endpoint validates input improperly, enabling unauthenticated remote attackers to exfiltrate Active Directory data (potentially including the cleartext ms-Mcs-AdmPwd u...
PT-2024-27519 · Securenvoy · Securenvoy Mfa
Name of the Vulnerable Software and Affected Versions: SecurEnvoy MFA versions prior to 9.4.514 Description: Multiple LDAP injections vulnerabilities exist due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through bli...
bouncycastle: potential blind LDAP injection attack using a self-signed certificate
A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious user to obtain...
CVE-2024-33868
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
CVE-2024-33868
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
CVE-2024-33868
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
CVE-2024-33868
CVE-2024-33868 affects linqi prior to 1.4.0.1 on Windows. The issue is an LDAP injection in the application’s processing. The vulnerability has a high impact risk per the NVD score (CRITICAL: 9.8) with network attack vector, no authentication, and full impact on confidentiality, integrity, and av...
CVE-2024-33868
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
PT-2024-25523 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in the software, specifically an LDAP injection. Recommendations: For versions prior to 1.4.0.1, update to version 1.4.0.1 or later to resolve the issue...
FreeBSD : GLPI -- multiple vulnerabilities (faccf131-00d9-11ef-92b7-589cfc023192)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the faccf131-00d9-11ef-92b7-589cfc023192 advisory. - GLPI is a Free Asset and IT Management Software package. When authentication is made against...