EUVD-2021-26380

Malware in sbrugna...

CVE-2021-3027

app/viewsmod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization...

The vulnerability of the LibrIT PaSSHport solution for secure SSH access lies in its failure to eliminate special elements in the LDAP request, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the LibrIT PaSSHport solution for secure SSH access exists due to the lack of measures to neutralize special elements in the LDAP request LDAP integration. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sendin...

CVE-2021-3027

app/viewsmod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization...

CVE-2021-3027

app/viewsmod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization...

Code injection

app/viewsmod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization...

CVE-2021-3027

CVE-2021-3027 affects LibrIT PaSSHport up to version 2.5. The issue is an LDAP Injection in app/views_mod/user/user.py where unsanitized user input in search filters leads to information leakage via crafted queries. Multiple sources (NVD/Red Hat/CNVD/OSV) corroborate the LDAP Injection root cause...

LibrIT PaSSHport 注入漏洞

PaSSHport is an SSH access software from LibrIT that controls IT components. An injection vulnerability exists in LibrIT PaSSHport version 2.5 and prior versions, which stems from user input that is not processed in any way, and can lead to information disclosure via a carefully crafted special...