CVE-2024-39848

Summary

CVE-2024-39848 is a vulnerability affecting Internet2 Grouper before version 5.6. It enables authentication bypass when LDAP authentication is utilized in specific ways. This issue stems from the interaction between internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. Additionally, "Grouper for Web Services" versions prior to 4.13.1 are also susceptible to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.