Ldap Integration

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

miniorange

NVD

Published: 2023-06-29

Updated: 2024-11-21

Summary

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for unauthenticated attackers to extract potentially sensitive information from the LDAP directory.

Vulnerable Configurations

Part	Description	Count
Application	Miniorange Miniorange Active Directory Integration / Ldap Integration 1.0 Miniorange Active Directory Integration / Ldap Integration 1.1 Miniorange Active Directory Integration / Ldap Integration 1.2 Miniorange Active Directory Integration / Ldap Integration 1.3 Miniorange Active Directory Integration / Ldap Integration 1.4 Miniorange Active Directory Integration / Ldap Integration 1.5 Miniorange Active Directory Integration / Ldap Integration 1.6 Miniorange Active Directory Integration / Ldap Integration 1.7 Miniorange Active Directory Integration / Ldap Integration 1.8 Miniorange Active Directory Integration / Ldap Integration 2.0 Miniorange Active Directory Integration / Ldap Integration 2.1 Miniorange Active Directory Integration / Ldap Integration 2.2 Miniorange Active Directory Integration / Ldap Integration 2.5 Miniorange Active Directory Integration / Ldap Integration 2.5.1 Miniorange Active Directory Integration / Ldap Integration 2.5.2 Miniorange Active Directory Integration / Ldap Integration 2.5.3 Miniorange Active Directory Integration / Ldap Integration 2.5.4 Miniorange Active Directory Integration / Ldap Integration 2.5.5 Miniorange Active Directory Integration / Ldap Integration 2.5.6 Miniorange Active Directory Integration / Ldap Integration 2.5.7 Miniorange Active Directory Integration / Ldap Integration 2.5.8 Miniorange Active Directory Integration / Ldap Integration 2.6.1 Miniorange Active Directory Integration / Ldap Integration 2.6.2 Miniorange Active Directory Integration / Ldap Integration 2.6.4 Miniorange Active Directory Integration / Ldap Integration 2.6.5 Miniorange Active Directory Integration / Ldap Integration 2.6.6 Miniorange Active Directory Integration / Ldap Integration 2.7 Miniorange Active Directory Integration / Ldap Integration 2.7.1 Miniorange Active Directory Integration / Ldap Integration 2.7.2 Miniorange Active Directory Integration / Ldap Integration 2.7.3 Miniorange Active Directory Integration / Ldap Integration 2.7.4 Miniorange Active Directory Integration / Ldap Integration 2.7.6 Miniorange Active Directory Integration / Ldap Integration 2.7.7 Miniorange Active Directory Integration / Ldap Integration 2.7.42 Miniorange Active Directory Integration / Ldap Integration 2.7.43 Miniorange Active Directory Integration / Ldap Integration 2.8 Miniorange Active Directory Integration / Ldap Integration 2.8.3 Miniorange Active Directory Integration / Ldap Integration 2.9 Miniorange Active Directory Integration / Ldap Integration 2.91 Miniorange Active Directory Integration / Ldap Integration 2.92 Miniorange Active Directory Integration / Ldap Integration 3.0 Miniorange Active Directory Integration / Ldap Integration 3.0.1 Miniorange Active Directory Integration / Ldap Integration 3.0.2 Miniorange Active Directory Integration / Ldap Integration 3.0.3 Miniorange Active Directory Integration / Ldap Integration 3.0.4 Miniorange Active Directory Integration / Ldap Integration 3.0.5 Miniorange Active Directory Integration / Ldap Integration 3.0.6 Miniorange Active Directory Integration / Ldap Integration 3.0.7 Miniorange Active Directory Integration / Ldap Integration 3.0.8 Miniorange Active Directory Integration / Ldap Integration 3.0.9 Miniorange Active Directory Integration / Ldap Integration 3.0.10 Miniorange Active Directory Integration / Ldap Integration 3.0.11 Miniorange Active Directory Integration / Ldap Integration 3.0.12 Miniorange Active Directory Integration / Ldap Integration 3.0.13 Miniorange Active Directory Integration / Ldap Integration 3.5 Miniorange Active Directory Integration / Ldap Integration 3.5.1 Miniorange Active Directory Integration / Ldap Integration 3.5.2 Miniorange Active Directory Integration / Ldap Integration 3.5.3 Miniorange Active Directory Integration / Ldap Integration 3.5.4 Miniorange Active Directory Integration / Ldap Integration 3.5.5 Miniorange Active Directory Integration / Ldap Integration 3.5.6 Miniorange Active Directory Integration / Ldap Integration 3.5.7 Miniorange Active Directory Integration / Ldap Integration 3.5.8 Miniorange Active Directory Integration / Ldap Integration 3.5.9 Miniorange Active Directory Integration / Ldap Integration 3.5.85 Miniorange Active Directory Integration / Ldap Integration 3.5.91 Miniorange Active Directory Integration / Ldap Integration 3.5.92 Miniorange Active Directory Integration / Ldap Integration 3.5.93 Miniorange Active Directory Integration / Ldap Integration 3.6 Miniorange Active Directory Integration / Ldap Integration 3.6.1 Miniorange Active Directory Integration / Ldap Integration 3.6.2 Miniorange Active Directory Integration / Ldap Integration 3.6.3 Miniorange Active Directory Integration / Ldap Integration 3.6.4 Miniorange Active Directory Integration / Ldap Integration 3.6.5 Miniorange Active Directory Integration / Ldap Integration 3.6.6 Miniorange Active Directory Integration / Ldap Integration 3.6.7 Miniorange Active Directory Integration / Ldap Integration 3.6.8 Miniorange Active Directory Integration / Ldap Integration 3.6.9 Miniorange Active Directory Integration / Ldap Integration 3.6.91 Miniorange Active Directory Integration / Ldap Integration 3.6.92 Miniorange Active Directory Integration / Ldap Integration 3.6.93 Miniorange Active Directory Integration / Ldap Integration 3.6.94 Miniorange Active Directory Integration / Ldap Integration 3.6.95 Miniorange Active Directory Integration / Ldap Integration 3.6.96 Miniorange Active Directory Integration / Ldap Integration 3.6.97 Miniorange Active Directory Integration / Ldap Integration 3.6.98 Miniorange Active Directory Integration / Ldap Integration 3.6.99 Miniorange Active Directory Integration / Ldap Integration 3.7 Miniorange Active Directory Integration / Ldap Integration 3.7.1 Miniorange Active Directory Integration / Ldap Integration 3.7.2 Miniorange Active Directory Integration / Ldap Integration 3.7.3 Miniorange Active Directory Integration / Ldap Integration 3.7.4 Miniorange Active Directory Integration / Ldap Integration 3.7.5 Miniorange Active Directory Integration / Ldap Integration 3.7.6 Miniorange Active Directory Integration / Ldap Integration 3.7.7 Miniorange Active Directory Integration / Ldap Integration 4.0 Miniorange Active Directory Integration / Ldap Integration 4.0.1 Miniorange Active Directory Integration / Ldap Integration 4.0.2 Miniorange Active Directory Integration / Ldap Integration 4.0.3 Miniorange Active Directory Integration / Ldap Integration 4.0.4 Miniorange Active Directory Integration / Ldap Integration 4.0.5 Miniorange Active Directory Integration / Ldap Integration 4.0.6 Miniorange Active Directory Integration / Ldap Integration 4.0.7 Miniorange Active Directory Integration / Ldap Integration 4.0.8 Miniorange Active Directory Integration / Ldap Integration 4.1.0 Miniorange Active Directory Integration / Ldap Integration 4.1.2 Miniorange Active Directory Integration / Ldap Integration 4.1.3 Miniorange Active Directory Integration / Ldap Integration 4.1.4 Miniorange Active Directory Integration / Ldap Integration 4.1.5	109

Summary

Vulnerable Configurations

References