medium5.0
CVE-2014-9217
Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards.
Impact
Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torch Gmbh | Graylog2 | through 0.91.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2014/q4/1130
- http://www.graylog2.org/news/post/0010-graylog2-v0-92
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99571
- http://seclists.org/oss-sec/2014/q4/1130
- http://www.graylog2.org/news/post/0010-graylog2-v0-92
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99571