CVE-2024-10127

9.8CRITICAL

Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the L

Publicado: 11/20/2024Actualizado: 10/29/2025
Ver en NVDVer en MITRE

Descripción

Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations that allowed user authentication without a password when the LDAP server itself had the vulnerable configuration.

Análisis IAImpulsado por IA

Productos Afectados

m-filesm-files_server
m-filesm-files_server

Referencias