Authentication Bypass Vulnerability in SurgeLDAP by Netwin
CVE-2004-2254
Currently unrated
What is CVE-2004-2254?
The SurgeLDAP product, specifically version 1.0g (Build 12) and earlier versions, is susceptible to an authentication bypass vulnerability. This security flaw enables remote attackers to access the administration interface by manipulating the 'utoken' parameter in a direct request to admin.cgi. Consequently, unauthorized users can gain access to critical management functionalities, exposing the system to potential malicious actions. Users of affected versions should consider immediate updates or mitigations to safeguard against this risk.