Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 5

Количество 5

ubuntu логотип

CVE-2014-0097

около 9 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
EPSS: Низкий
redhat логотип

CVE-2014-0097

больше 12 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2014-0097

около 9 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
EPSS: Низкий
debian логотип

CVE-2014-0097

около 9 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 ...

CVSS3: 7.3
EPSS: Низкий
github логотип

GHSA-gv9v-c375-hvmg

больше 4 лет назад

Improper Authentication in Spring Security

CVSS3: 7.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
1%
Низкий
около 9 лет назад
redhat логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS2: 7.5
1%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
1%
Низкий
около 9 лет назад
debian логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 ...

CVSS3: 7.3
1%
Низкий
около 9 лет назад
github логотип
GHSA-gv9v-c375-hvmg

Improper Authentication in Spring Security

CVSS3: 7.3
1%
Низкий
больше 4 лет назад

Уязвимостей на страницу