793 matches found
CVE-2021-3027
CVE-2021-3027 affects LibrIT PaSSHport up to version 2.5. The issue is an LDAP Injection in app/views_mod/user/user.py where unsanitized user input in search filters leads to information leakage via crafted queries. Multiple sources (NVD/Red Hat/CNVD/OSV) corroborate the LDAP Injection root cause...
CVE-2021-29156
ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key...
Code injection
ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key...
CVE-2021-29156
ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key...
CVE-2021-29156
CVE-2021-29156 affects ForgeRock OpenAM (before 13.5.1). An LDAP injection vulnerability via the Webfinger protocol (and password-reset flow) allows unauthenticated attackers to perform character-by-character data extraction, potentially retrieving password hashes, session tokens, or a private ke...
PT-2021-18117 · Forgerock · Forgerock Openam
Name of the Vulnerable Software and Affected Versions: ForgeRock OpenAM versions prior to 13.5.1 Description: The issue allows LDAP injection via the Webfinger protocol. An unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a...
CVE-2020-36144
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization...
CVE-2020-36144
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization...
Design/Logic Flaw
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization...
CVE-2020-36144
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization...
CVE-2020-36144
Redash 8.0.0 is affected by LDAP Injection (CVE-2020-36144). The root cause is lack of sanitization of the username in the LDAP SEARCH TEMPLATE, leading to an information leak through specially crafted queries. Affected component: LDAP authentication path handling the search filter. Impact stated...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...
Security feature bypass
CITSmart before 9.1.2.23 allows LDAP Injection...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...
CVE-2020-35775
CVE-2020-35775 affects CITSmart ITSM prior to 9.1.2.23. The issue is an LDAP injection leading to authentication bypass: the login logic returns the last user from an LDAP search instead of the intended one, allowing login with a known account without the target password. Affected versions are = ...
Lightweight Directory Access Protocol (LDAP) Injection
is-user-valid is vulnerable to Lightweight Directory Access Protocol LDAP Injection. The vulnerability exists due to an unsanitized validate function when authenticating the email in the getEmail function...
CVE-2021-23335
All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...