GHSA-9whh-582r-589h

ghsaUSosv

ldap_fluff authentication bypass

view advisory published 2022-05-14Licence: CC-BY-4.0

The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2012-5604US	medium4.3	1.75% (78th)	—	2013-03-01
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vec…

references

External citations — patches, advisories, analysis.

http://rhn.redhat.com/errata/RHSA-2013-0544.htmlWEB
https://bugzilla.redhat.com/show_bug.cgi?id=882136WEB
https://github.com/theforeman/ldap_fluffPACKAGE
https://github.com/theforeman/ldap_fluff/commit/e4c90a522275aeaa48ca9982ce75597f0954af48WEB
https://nvd.nist.gov/vuln/detail/CVE-2012-5604ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan