Improper Authentication
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-287: Improper Authentication |
| OWASP | A02:2017 - Broken Authentication |
| Confidence Level | Medium |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
The code allows anonymous binding to an LDAP server, meaning users can connect without providing any authentication. This makes it possible for anyone to query or interact with your LDAP directory without verifying their identity.
Impact#
If exploited, attackers could gain unauthorized access to sensitive directory information, potentially exposing user accounts, organizational structure, or other confidential data. This can lead to data leaks, privilege escalation, or make it easier for attackers to move laterally within your systems.