1 matches found
OpenBao Userpass and LDAP User Lockout Bypass
Impact Attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by different aliasing between pre-flight and full login request user entity alias attributions. Patches OpenBao v2.3.2 will patch this issue. Workarounds Existing user...
5.3CVSS6.2AI score0.0022EPSS
SaveExploits0References6Affected Software1
20