1 matches found
openldap: rootpw not verified via slapd.conf when using the NDB backend
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...
6.8CVSS6AI score0.03874EPSS
SaveExploits0References4
20