https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 09:58:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-136289 EUVD-2026-136289 https://cve.radiocsirt.org/vuln/euvd-2026-136289 https://cve.radiocsirt.org/vuln/fkie_cve-2007-4364 <p>Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain &#34;unexpected / strange response&#34; from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.</p> <p>Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain &#34;unexpected / strange response&#34; from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-4364 https://cve.radiocsirt.org/vuln/ghsa-fjwx-jcvh-q6g8 <p>Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain &#34;unexpected / strange response&#34; from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.</p> <p>Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain &#34;unexpected / strange response&#34; from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.</p> https://cve.radiocsirt.org/vuln/ghsa-fjwx-jcvh-q6g8 https://cve.radiocsirt.org/vuln/gsd-2007-4364 gsd-2007-4364 https://cve.radiocsirt.org/vuln/gsd-2007-4364