Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:48 a.m.23 views

Weak Password Requirements in UnboundID LDAP SDK

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

9.8CVSS2.2AI score0.01681EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2021/09/29 8:15 p.m.9 views

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

9.8CVSS0.00507EPSS
Exploits0References2
Prion
Prion
added 2021/09/29 8:15 p.m.13 views

Path traversal

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

7.5CVSS9.4AI score0.00507EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/09/29 7:17 p.m.12 views

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

9.7AI score0.00507EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/29 12:0 a.m.3 views

Couchbase Server 授权问题漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions 6.5.x through 6.6.2, which stems from RFC4513 that allows...

9.8CVSS8.3AI score0.00507EPSS
Exploits0References3
NVD
NVD
added 2018/03/16 2:29 p.m.16 views

CVE-2018-1000134

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

9.8CVSS9.7AI score0.01681EPSS
Exploits0References3
Prion
Prion
added 2018/03/16 2:29 p.m.25 views

Improper access control

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

7.5CVSS9.5AI score0.01681EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder