Description
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
References
- 20000921 Multiple Vulnerabilities in CiscoSecure ACS for Windows NT Server vendor-advisory
- ciscosecure-ldap-bypass-authentication(5274) vdb-entry
- 1708 vdb-entry