CVE-2024-10127 — Support for authentication bypass condition in M-Files LDAP authentication
Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication withou…
Published: 2024-11-20 · CVSS: 9.2 · CVSS 4.0
Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the LDAP server itself had the vulnerable configuration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7