Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2022/05/13 1:48 a.m.•35 views

Weak Password Requirements in UnboundID LDAP SDK

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

9.8CVSS2.2AI score0.04651EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2021/09/29 8:15 p.m.•19 views

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

9.8CVSS0.0107EPSS
SaveExploits0References2
Prion
Prion
•added 2021/09/29 8:15 p.m.•23 views

Path traversal

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

7.5CVSS9.4AI score0.0107EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/09/29 7:17 p.m.•33 views

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

9.7AI score0.0107EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/29 12:00 a.m.•12 views

Couchbase Server 授权问题漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions 6.5.x through 6.6.2, which stems from RFC4513 that allows...

9.8CVSS8.3AI score0.0107EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/29 12:00 a.m.•3 views

CVE-2021-35943: Improper Authentication

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

9.8CVSS5.7AI score0.0107EPSS
SaveExploits0References2
NVD
NVD
•added 2018/03/16 2:29 p.m.•29 views

CVE-2018-1000134

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

9.8CVSS9.7AI score0.04651EPSS
SaveExploits0References3
Prion
Prion
•added 2018/03/16 2:29 p.m.•37 views

Improper access control

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

7.5CVSS9.5AI score0.04651EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder