Login With Empty Credential

github.com/go-ldap/ldap allows the user to login with empty password or credentials. The vulnerability is only affects applications with the following conditions: - authorization of a user is performed by relying on the return error of the Bind function call (i.e., a nil return is considered authorized) - the LDAP server is also used allowing unauthenticated bind.