Description
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
References
- mms-data-repository-access(9657) vdb-entry
- 5308 vdb-entry
- MS02-036 vendor-advisory