CVE-2014-4668

The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider…

published July 2, 2014

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02844 · 86.5th percentile
Published
2014-07-02T01:00Z
EPSS history
Timeline
  • 02 JUL 01:00Z
    The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider…
    cvelistv5