CVE-2017-14623

CVE-2017-14623 affects the ldap.v2 (go-ldap) package for Go up to v2.5.0. The issue arises when an application relies on the Bind error return to authorize users and uses an LDAP server that permits unauthenticated binds; this can allow an attacker to login with an empty password, bypassing acces...