| Package | Affected versions | Patched versions |
|---|---|---|
| bugzilla | ≤ 2.14.1 |
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free