CVE-2012-5604

Description

The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS Score

Exploitation Probability

0.181

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2012-5604 are fixed in Ruby-ldap_fluff 0.4.0	Windows
Vulnerabilities CVE-2012-5604 are fixed in Ruby-ldap_fluff for Linux 0.4.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234