ldap

Jan 11, 2023 GO-2023-1956 +1 more

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jan 4, 2023 GO-2023-1463 +3 more

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 29, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 21, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jun 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 30, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 27, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 25, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

type Ldap

+ TLS bool

Mar 7, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Feb 14, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jan 12, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Dec 8, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 23, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 15, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 9, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ type Ldap struct

+ Address string

+ Conn *ldap.Conn

+ Password string

+ Port string

+ Username string

+ func NewLdapClient(address, port, username, password string) *Ldap

+ func (l *Ldap) Connect() error

+ func (l *Ldap) Login(dn, username, password string) error

+ func (l *Ldap) Search(dn, filter string) ([]*ldap.Entry, error)