Security Advisory

CVE-2010-2940

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-08-30 19:00:00

Last updated 2024-08-07 02:55:45

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.

← Browse all CVEs View on cve.org ↗