CVE-2013-3107

Currently unrated

Key Information:

Vendor
Vmware
Status
Vcenter Server Appliance
Vendor
CVE Published:
1 May 2013

Summary

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.

References

http://www.vmware.com/security/advisories/VMSA-2013-0006....
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.