VULNERABILITY INTELLIGENCE

CVE-2014-0132

CVSS score6.5 MEDIUM
EPSS probability2.19%
CISA KEVNot currently listed
Published2014-03-18
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.

Weakness classification

  • CWE-287: Improper Authentication

Primary references