PT-2014-6050

Name of the Vulnerable Software and Affected Versions Cherokee versions 1.2.103 and earlier Description The issue concerns the cherokee validator ldap check function in validator ldap.c. When LDAP is used, it does not properly consider unauthenticated-bind semantics. This allows remote attackers ...