11494 matches found
CVE-2023-5003 Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so...
CVE-2023-5003
Summary: CVE-2023-5003 affects the Active Directory Integration / LDAP Integration WordPress plugin (pre-4.1.10). The issue cores in storing sensitive LDAP logs in a buffer file created when an administrator exports logs; the buffer file is not removed and can be accessed by anyone who knows the ...
CVE-2023-29484
In Terminalfour prior to 8.3.16, a misconfiguration in LDAP authentication allows misconfigured LDAP users to log in with an invalid password, enabling unauthorized access as described across multiple sources (CVE-2023-29484). The affected component is Terminalfour’s login/authentication flow; ro...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : 389 Directory Server vulnerabilities (USN-5231-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5231-1 advisory. It was discovered that 389 Directory Server presented to users, during authentication, an error message which could be used to...
CVE-2023-29484
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...
CVE-2023-29484
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...
SUSE CVE-2023-32723
Request to LDAP is sent before user permissions are checked...
CVE-2023-32723
Request to LDAP is sent before user permissions are checked...
DEBIAN-CVE-2023-32723
Request to LDAP is sent before user permissions are checked...
CVE-2023-32723
Request to LDAP is sent before user permissions are checked...
Cross site request forgery (csrf)
Request to LDAP is sent before user permissions are checked...
CVE-2023-32723
CVE-2023-32723 describes an issue in Zabbix where a request to LDAP is sent before user permissions are checked. Root cause: permission-check ordering allows unauthorized LDAP access to affect data in transit. According to the connected Debian LTS advisory (DLA-3717-1), this vulnerability has bee...
CVE-2023-32723 Inefficient permission check in class CControllerAuthenticationUpdate
Request to LDAP is sent before user permissions are checked...
CVE-2023-32723 Inefficient permission check in class CControllerAuthenticationUpdate
Request to LDAP is sent before user permissions are checked...
CVE-2023-32723
Request to LDAP is sent before user permissions are checked...
Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2023-87502c4a93)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-32723
Request to LDAP is sent before user permissions are checked...
[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-17.fc37
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
Moderate: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
