C-sharp : Unsafe LDAP access control: anonymous bind

In the absence of proper access control, LDAP query execution via anonymous bind may give an attacker unauthorized access to LDAP directories.

LDAP is an application-level protocol for accessing and maintaining distributed directory information services (X.500 directory service). If LDAP query is based on data from an untrusted source (e.g., user input) and the data do not pass validation, an attacker can modify the query and execute it with the application rights.

Anonymous bind is equivalent to the lack of authentication when executing LDAP-queries.