LDAP allows null bases and LDAPv3 Servers

Hi and thanks for your report.

It seems that https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/XE3C6DO7LQE2V4I4IJ55N6222TCTRI7Q/ also confirms your observations.

The mentioned VT has been updated to not report a vulnerability against LDAP servers supporting LDAPv3. These changes should arrive in the feed in the next few days.

2 Likes