{"vulnerability": "CVE-2020-26168", "sightings": [{"uuid": "ef181a57-f816-41ab-823a-cb5380860b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26168", "type": "seen", "source": "https://t.me/cibsecurity/16059", "content": "\u203c CVE-2020-26168 \u203c\n\nThe LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify properly the password in some system-user-dn scenarios. As a result, users (clients/members) can be authenticated even if they provide invalid passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T00:55:49.000000Z"}]}