Skip to content
OpenAdvisories

Vendor

YugaByte

1 known vulnerabilities.

Products

Yugabyte DB 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2022-37397

    The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory

    An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password.

    YugaByte Yugabyte DB