CVE-2014-9043

The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass…

published February 4, 2015

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01859 · 78.9th percentile
Published
2015-02-04T18:00Z
EPSS history
Timeline
  • 04 FEB 18:00Z
    The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass…
    cvelistv5