Lucene search
HistoryMar 01, 2013 - 5:40 a.m.
CVE-2012-5604
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
51.2%
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.
Affected configurations
Node
redhatcloudformsMatch1.1
Related
osv
osv
ldap_fluff authentication bypass
2022-05-14 03:24:09
cve
cve
CVE-2012-5604
2013-03-01 05:40:16
github
github
ldap_fluff authentication bypass
2022-05-14 03:24:09
prion
prion
Authentication flaw
2013-03-01 05:40:00
cvelist
cvelist
CVE-2012-5604
2013-03-01 02:00:00
rubygems
rubygems
nessus
nessus
RHEL 6 : Subscription Asset Manager (RHSA-2013:0544)
2013-03-10 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
51.2%
Related for NVD:CVE-2012-5604