PYSEC-2020-159

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

PT-2020-16344

Name of the Vulnerable Software and Affected Versions Alerta versions prior to 8.1.0 Description The issue allows users to bypass LDAP authentication by providing an empty password when the Alerta server is configured to use LDAP as the authorization provider. This affects deployments where LDAP...