Go-ldap Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Go-ldap Project records in CISA KEV

No Go-ldap Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Ldap · all components

TI-2017-10719 CVE-2017-14623 · GHSA-x27w-qxhg-343v

LOW 39

In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01685 Published 2017-09-20 Partial fix · 2.5.0 CWE-287