What is GHSA-9whh-582r-589h?

GHSA-9whh-582r-589h is a security advisory published by GitHub Security Advisories with Medium severity. ldap_fluff authentication bypass

Which CVE IDs does GHSA-9whh-582r-589h cover?

GHSA-9whh-582r-589h covers the following CVE IDs: CVE-2012-5604. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-9whh-582r-589h?

GHSA-9whh-582r-589h affects 1 product, including: rubygems/ldap_fluff:\u003c 0.4.0.

GHSA-9whh-582r-589hMedium

ldap_fluff authentication bypass

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

January 26, 2023

🔗 CVE IDs covered (1)

CVE-2012-5604 →

📋 Description

The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.

🎯 Affected products1

rubygems/ldap_fluff:< 0.4.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2012-5604
https://bugzilla.redhat.com/show_bug.cgi?id=882136
http://rhn.redhat.com/errata/RHSA-2013-0544.html
https://github.com/theforeman/ldap_fluff/commit/e4c90a522275aeaa48ca9982ce75597f0954af48
https://github.com/advisories/GHSA-9whh-582r-589h