Description
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | ldap_fluff | < 0.4.0 | 0.4.0 | GHSA-9whh-582r-589h |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=882136
- RHSA-2013:0544 vendor-advisory