CVE-2018-11407: Improper Authentication

June 13, 2018 (updated August 3, 2018)

An issue was discovered in the Ldap component in Symfony. It allows remote attackers to bypass authentication by logging in with a null password and valid username, which triggers an unauthenticated bind.

References

symfony.com/cve-2018-11407

Code Behaviors & Features

Detect and mitigate CVE-2018-11407 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →