Read the docs

ltb-project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ltb-project records in CISA KEV

No ltb-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ldap Tool Box Self Service Password 1 record MEDIUM Self Service Password 1 record MEDIUM

Records

1 record in Ldap Tool Box Self Service Password · all components

TI-2018-08918 CVE-2018-12421 · GHSA-mxq8-mx56-69hw

LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user…

Priority MEDIUM 47

LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, because the ldap_bind return value is mishandled and the PHP data…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02716 Published 2018-06-14 No fix listed CWE-640
Open these records in search →