CVE-2020-35775

CITSmart before 9.1.2.23 allows LDAP Injection...

Security feature bypass

CITSmart before 9.1.2.23 allows LDAP Injection...

CVE-2020-35775

CITSmart before 9.1.2.23 allows LDAP Injection...

CVE-2020-35775

CVE-2020-35775 affects CITSmart ITSM prior to 9.1.2.23. The issue is an LDAP injection leading to authentication bypass: the login logic returns the last user from an LDAP search instead of the intended one, allowing login with a known account without the target password. Affected versions are = ...

Lightweight Directory Access Protocol (LDAP) Injection

is-user-valid is vulnerable to Lightweight Directory Access Protocol LDAP Injection. The vulnerability exists due to an unsanitized validate function when authenticating the email in the getEmail function...

PT-2021-11856

Name of the Vulnerable Software and Affected Versions: CITSmart versions prior to 9.1.2.23 Description: The issue allows LDAP Injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...

CVE-2020-35775: Improper Neutralization of Special Elements in Output Used by a Downstream Component

CITSmart before 9.1.2.23 allows LDAP Injection...

CVE-2021-23335

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

Authentication flaw

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

CVE-2021-23335 LDAP Injection

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

CVE-2021-23335

CVE-2021-23335 affects the npm package is-user-valid (Node.js). The vulnerability is an LDAP Injection in the authentication logic, enabling potential authentication bypass or information exposure. The IBM bulletin confirms the CVE is acknowledged across IBM Cloud Pak for Data components (no expl...

CVE-2021-23335

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

CVE-2021-23335

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

PT-2021-15441

Name of the Vulnerable Software and Affected Versions is-user-valid affected versions not specified Description The issue concerns LDAP Injection, which can result in either authentication bypass or information exposure. Recommendations At the moment, there is no information about a newer version...

CVE-2021-23335: Improper Neutralization of Special Elements in Output Used by a Downstream Component

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

PT-2021-3367

Name of the Vulnerable Software and Affected Versions LibrIT PaSSHport versions 2.5 and earlier Description The issue exists due to the lack of measures to neutralize special elements in LDAP requests, allowing for LDAP injection. This can be exploited by a remote attacker to gain unauthorized...

GitHub Security Lab: [javascript] CWE-90: CodeQL to detect LDAP Injection

This bug was reported directly to GitHub Security Lab...

phpLDAPadmin <= 1.2.2 Multiple Vulnerabilities - Windows

phpLDAPadmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpLDAPadmin <= 1.2.2 Multiple Vulnerabilities - Linux

phpLDAPadmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-16212

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...