CVE-2013-3107 - VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password

Back Back to CVE browser

MEDIUM

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password

Published May 1, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 1.98%

Description

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (1)

http://www.vmware.com/security/advisories/VMSA-2013-0006.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.vmware.com/security/advisories/VMSA-2013-0006.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 1, 2013

Updated Sep 16, 2024

Reserved Apr 17, 2013

Link CVE-2013-3107

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-3107

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-3107