CVE-2024-12510CWE-287

LDAP Authentication Sever Pass-back attack

Medium · published February 3, 2025

CVSS v3.1
6.7
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00967 · 61.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-02-03T18:52Z
EPSS history
Timeline
  • 03 FEB 18:52Z
    LDAP Authentication Sever Pass-back attack
    cvelistv5