Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arbitrary password is provided.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GOsa 授权问题漏洞
Vulnerability Description
GOsa是一款LDAP管理器。该产品主要用于管理用户和组、应用程序、电话和传真等。 GONICUS GOsa 2019-04-11及之前版本中的LDAP类存在授权问题漏洞。攻击者可利用该漏洞获取LDAP数据库未授权的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A