Логотип exploitDog
bind:CVE-2014-0097
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2014-0097

Количество 5

Количество 5

ubuntu логотип

CVE-2014-0097

больше 8 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
EPSS: Низкий
redhat логотип

CVE-2014-0097

почти 12 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2014-0097

больше 8 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
EPSS: Низкий
debian логотип

CVE-2014-0097

больше 8 лет назад

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 ...

CVSS3: 7.3
EPSS: Низкий
github логотип

GHSA-gv9v-c375-hvmg

больше 3 лет назад

Improper Authentication in Spring Security

CVSS3: 7.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
0%
Низкий
больше 8 лет назад
redhat логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS2: 7.5
0%
Низкий
почти 12 лет назад
nvd логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password.

CVSS3: 7.3
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 ...

CVSS3: 7.3
0%
Низкий
больше 8 лет назад
github логотип
GHSA-gv9v-c375-hvmg

Improper Authentication in Spring Security

CVSS3: 7.3
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу