| Package | Affected versions | Patched versions |
|---|---|---|
| yugabytedb | = 2.6.1 |
An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free