Home / Vulnerability Database / Scala : Unsafe LDAP access control: anonymous bind
Scala

Scala : Unsafe LDAP access control: anonymous bind

Overview

In the absence of proper access control, LDAP query execution via anonymous bind may give an attacker unauthorized access to LDAP directories.

LDAP is an application-level protocol for accessing and maintaining distributed directory information services (X.500 directory service). If LDAP query is based on data from an untrusted source (e.g., user input) and the data do not pass validation, an attacker can modify the query and execute it with the application rights.

Anonymous bind is equivalent to the lack of authentication when executing LDAP-queries.

LOW

DerScanner Severity Score

Do you want to fix Scala : Unsafe LDAP access control: anonymous bind in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length