Unrated severityNVD Advisory· Published Aug 30, 2010· Updated Apr 29, 2026
CVE-2010-2940
CVE-2010-2940
Description
The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.
Affected products
1- cpe:2.3:a:fedoraproject:sssd:1.3.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.