Description
Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication.
References
- http://developer.joomla.org/security/594-20140902-core-unauthorised-logins.html
- 61638 third-party-advisory
- 61606 third-party-advisory