Lucene search
Veracode Vulnerability DatabaseVERACODE:34412HistoryFeb 27, 2022 - 11:16 p.m.
Access-Control Bypass
2022-02-2723:16:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
lemonldap is vulnerable to access control bypass. The vulnerability exists due to the RESTServer pwdConfirm always returns true with Combination + Kerberos.
Related
prion
prion
Design/Logic Flaw
2022-07-18 00:15:00
osv
osv
CVE-2021-40874
2022-07-18 00:15:08
debiancve
debiancve
CVE-2021-40874
2022-07-18 00:15:00
ubuntucve
ubuntucve
CVE-2021-40874
2022-07-18 00:00:00
cve
cve
CVE-2021-40874
2022-07-18 00:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Related for VERACODE:34412