PT-2023-3910 · Microsoft · Windows Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to insufficient input validation in Windows Active Directory Certificate Services AD CS, which can be exploited by a remote...

Microsoft Windows Active Directory 安全漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Azure Active Directory Connect 安全漏洞

Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. A security vulnerability exists in Microsoft Azure Active Directory Connect. An attacker exploiting the vulnerability could bypass certain features. T...

Microsoft Azure Active Directory Connect 安全漏洞

Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. A security vulnerability exists in Microsoft Azure Active Directory Connect. An attacker exploiting the vulnerability could bypass certain features...

The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress management systems arises from the failure to properly neutralize special elements in LDAP requests. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress content management systems is related to the lack of measures taken to neutralize special elements in LDAP requests when processing the username parameter. Exploiting this vulnerability can allow an attack...

JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident

JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some of its clients. As part of its damage control efforts, JumpCloud has reset the application programming interface API keys of all customers...

ZOHO ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

CVE-2023-3447

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for unauthenticated attackers to extract potentially...

CVE-2023-3447

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with an existing account on a vulnerable...

Directory traversal

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for unauthenticated attackers to extract potentially...

CVE-2023-3447

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for unauthenticated attackers to extract potentially...

CVE-2023-3447

Summary (CVE-2023-3447): The WordPress plugin “Active Directory Integration / LDAP Integration” is vulnerable to LDAP Injection due to insufficient escaping of the supplied username in versions up to and including 4.1.5. This can allow unauthenticated attackers to extract potentially sensitive in...

CVE-2023-3447 Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with an existing account on a vulnerable...

LDAP Active Directory - domainDNS Enumeration

Binary data ldapenumdomaindns.nbin...

WordPress plugin Active Directory Integration/LDAP Integration 注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An injection vulnerability exists in...

PT-2023-3437 · WordPress · Active Directory Integration / Ldap Integration

Name of the Vulnerable Software and Affected Versions: Active Directory Integration / LDAP Integration plugin for WordPress versions up to, and including, 4.1.5 Description: The issue is related to insufficient escaping on the supplied username value, which makes it possible for unauthenticated...

WordPress Active Directory Integration / LDAP Integration Plugin <= 4.1.5 is vulnerable to Sensitive Data Exposure

Software Active Directory Integration / LDAP Integration Type Plugin Vulnerable versions = 4.1.5 Fixed in 4.1.6 OWASP Top 10 A1: Injection Classification Sensitive Data Exposure CVE CVE-2023-3447 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID f63ceb460cab Credits Luca...

New Fortinet's FortiNAC Vulnerability Exposes Networks to Code Execution Attacks

Fortinet has rolled out updates to address a critical security vulnerability impacting its FortiNAC network access control solution that could lead to the execution of arbitrary code. Tracked as CVE-2023-33299, the flaw is rated 9.6 out of 10 for severity on the CVSS scoring system. It has been...

SUSE CVE-2023-3128

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app...

CVE-2023-3128

A flaw was found in Grafana, which validates Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique across Azure AD tenants, which enables Grafana account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant AzureAD OAuth...