CVE-2015-1169 in Central Authentication Service
摘要 (英语)
Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
预定
2015-01-17
披露
2015-02-10
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 74154 | Apereo Central Authentication Service 权限提升 | 74 | 未定义 | 官方修复 | CVE-2015-1169 |