Home / Vulnerability Database / Scala : Unsafe LDAP access control: anonymous bind
Scala
Scala : Unsafe LDAP access control: anonymous bind
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
CWE/SANS Top 25 2011
Overview
In the absence of proper access control, LDAP query execution via anonymous bind may give an attacker unauthorized access to LDAP directories.
LDAP is an application-level protocol for accessing and maintaining distributed directory information services (X.500 directory service). If LDAP query is based on data from an untrusted source (e.g., user input) and the data do not pass validation, an attacker can modify the query and execute it with the application rights.
Anonymous bind is equivalent to the lack of authentication when executing LDAP-queries.
LOW
DerScanner Severity Score
Do you want to fix Scala : Unsafe LDAP access control: anonymous bind in your application?
See also
Scala
Scala : Unreleased resource stream
Scala
Scala : Multiple loggers in same class
Scala
