Mod Auth Ldap

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-8086 Jan 28, 17:15 CRITICAL Act Now

The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Debian Debian Linux Prosody Mod Auth Ldap +1

NVD

CVSS 3.1

9.8

EPSS

1.6%

CVE-2020-8086

EPSS 2% CVSS 9.8

CRITICAL Act Now

The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Debian Debian Linux +3

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy