CVE-2011-1024: openldap

Vulnerability summary

CVE-2011-1024 is a medium (CVSS 4.6) vulnerability in openldap. EPSS estimates a 2.59% chance of exploitation in the next 30 days, higher than 85% of scored vulnerabilities.

Timeline

1. 20-03-2011
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.