theforeman/ldap_fluff · Security
ldap_fluff authentication bypass
- GHSA ID
- GHSA-9whh-582r-589h
- CVE ID
- CVE-2012-5604
- Severity
- medium
- Published
- Updated
Description
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.