CVE-2014-3999 in Horde Webmail
Summary
The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
06/09/2014
Disclosure
04/10/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13582 | Horde Webmail Horde_ldap improper authentication | 287 | Unproven | Official fix | CVE-2014-3999 |