PT-2024-28699 · Internet2 · Grouper For Web Services +1

Name of the Vulnerable Software and Affected Versions: Internet2 Grouper versions prior to 5.6 Grouper for Web Services versions prior to 4.13.1 Description: The issue allows authentication bypass when LDAP authentication is used in certain ways. This is related to the...

CVE-2024-39848

Internet2 Grouper versions prior to 5.6 and Grouper for Web Services before 4.13.1 are vulnerable to an authentication bypass when LDAP authentication is used in specific ways. The root cause is located in the internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication class and involves...