CVE-2013-2157

Опубликовано: 13 июн. 2013

Источник: redhat

CVSS2: 5

Описание

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=971884openstack-keystone: Authentication bypass when using LDAP backend

5 Medium

CVSS2

Связанные уязвимости

CVE-2013-2157

ubuntu

почти 13 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVE-2013-2157

nvd

почти 13 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVE-2013-2157

debian

почти 13 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when u ...

GHSA-w396-2gg4-mxgv

github

около 4 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

5 Medium

CVSS2