Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-39848

June 29, 2024, 10:15 p.m.

Product(s) Impacted

Internet2 Grouper

before 5.6

Grouper for Web Services

before 4.13.1

Description

Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web Services" before 4.13.1.

Weaknesses

Date

Published: June 29, 2024, 10:15 p.m.

Last Modified: June 29, 2024, 10:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://spaces.at.internet2.edu/ cve@mitre.org