[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm4Gcf7avE822xyTiUZQE4eul4hohxygU2zVKl4AhagU":3,"g5a-risk:CVE-2014-4668":198},{"success":4,"data":5,"meta":196},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":68,"references":69,"referencesCount":121,"weaknesses":122,"weaknessesCount":131,"isActivelyExploited":132,"cisaInfo":15,"otxData":15,"relatedBlogPosts":133,"seoMetadata":134,"configurations":159,"relatedVendorCves":194,"notableEvents":195},"CVE-2014-4668","What is CVE-2014-4668?","The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty password.","The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated...","2014-07-02T04:14:17.233","2025-04-12T10:46:40.837",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,6.4,0.02844,[28,28,28,28,28,28,28],"Medium",[32,37,40,43,48,53,56,59,62,65],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"fedoraproject","fedora","20","cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":38,"criteria":39,"vulnerable":4},"21","cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":41,"criteria":42,"vulnerable":4},"22","cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"mageia_project","mageia","4","cpe:2.3:o:mageia_project:mageia:4:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"cherokee-project","cherokee","*","cpe:2.3:a:cherokee-project:cherokee:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"1.2.2","cpe:2.3:a:cherokee-project:cherokee:1.2.2:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"1.2.98","cpe:2.3:a:cherokee-project:cherokee:1.2.98:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"1.2.99","cpe:2.3:a:cherokee-project:cherokee:1.2.99:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":63,"criteria":64,"vulnerable":4},"1.2.101","cpe:2.3:a:cherokee-project:cherokee:1.2.101:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":66,"criteria":67,"vulnerable":4},"1.2.102","cpe:2.3:a:cherokee-project:cherokee:1.2.102:*:*:*:*:*:*:*",10,[70,74,78,81,84,88,91,95,99,103,105,107,109,111,113,115,117,119],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fadvisories.mageia.org\u002FMGASA-2015-0181.html","Mageia",[],{"url":75,"source":76,"tags":77},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-April\u002F155776.html","Fedoraproject",[],{"url":79,"source":76,"tags":80},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-April\u002F156162.html",[],{"url":82,"source":76,"tags":83},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-April\u002F156190.html",[],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fopenwall.com\u002Flists\u002Foss-security\u002F2014\u002F06\u002F28\u002F3","Openwall",[],{"url":89,"source":86,"tags":90},"http:\u002F\u002Fopenwall.com\u002Flists\u002Foss-security\u002F2014\u002F06\u002F28\u002F7",[],{"url":92,"source":93,"tags":94},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2015:225","Mandriva",[],{"url":96,"source":97,"tags":98},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F68249","Securityfocus",[],{"url":100,"source":101,"tags":102},"https:\u002F\u002Fgithub.com\u002Fcherokee\u002Fwebserver\u002Fcommit\u002Ffbda667221c51f0aa476a02366e0cf66cb012f88","GitHub",[],{"url":71,"source":72,"tags":104},[],{"url":75,"source":76,"tags":106},[],{"url":79,"source":76,"tags":108},[],{"url":82,"source":76,"tags":110},[],{"url":85,"source":86,"tags":112},[],{"url":89,"source":86,"tags":114},[],{"url":92,"source":93,"tags":116},[],{"url":96,"source":97,"tags":118},[],{"url":100,"source":101,"tags":120},[],18,[123],{"id":124,"name":125,"description":126,"extendedDescription":127,"status":128,"abstraction":129,"structure":130},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":135,"metaDescription":136,"keywords":137,"canonicalUrl":138,"structuredData":139},"What is CVE-2014-4668? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-4668, a medium severity cyber security vulnerability from 2014. The cherokee_validator_ldap_check function in validator_ld...","CVE-2014-4668, CVE-2014-4668 vulnerability, CVE-2014-4668 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, fedoraproject security, mageia_project security, cherokee-project security, fedora vulnerability, mageia vulnerability, cherokee vulnerability","\u002Fwhat-is\u002Fcve-2014-4668",{"@context":140,"@type":141,"headline":135,"description":136,"datePublished":10,"dateModified":11,"author":142,"publisher":146,"about":150,"mainEntityOfPage":154,"articleSection":157,"keywords":158},"https:\u002F\u002Fschema.org","TechArticle",{"@type":143,"name":144,"url":145},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":143,"name":144,"url":145,"logo":147},{"@type":148,"url":149},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":151,"name":6,"description":152,"additionalType":153},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":155,"@id":156},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-4668","Cybersecurity","CVE-2014-4668, CVE-2014-4668 vulnerability, CVE-2014-4668 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[160,171,177],{"Operator":15,"Negate":15,"Nodes":161},[162],{"Operator":163,"Negate":15,"CPEMatch":164},"OR",[165,167,169],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"56BDB5A0-0839-4A20-A003-B8CD56F48171",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"253C303A-E577-4488-93E6-68A8DD942C38",{"Operator":15,"Negate":15,"Nodes":172},[173],{"Operator":163,"Negate":15,"CPEMatch":174},[175],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EDB6C80D-ADCA-481E-B54B-3BEA3D7D3107",{"Operator":15,"Negate":15,"Nodes":178},[179],{"Operator":163,"Negate":15,"CPEMatch":180},[181,184,186,188,190,192],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":182,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":183},"D4AA7EA7-8D67-49E1-9D93-88CA97A8EFAC","1.2.103",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":185,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6D5B3C97-844D-4F58-87F4-11962A7228F2",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":187,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"762B5682-C942-4DC7-9C69-D0AC3D4E275C",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9FB62CE7-9FC9-4E7F-8B3D-45710949EA6A",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":191,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D33D414B-0A4C-41EE-991A-788559EC3A03",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":193,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1407BB70-8D64-422F-8487-4D8B3E88963E",[],[],{"lastModified":11,"cacheTime":197,"version":21},1792355255910,{"score":199,"band":200,"action":201,"scoredAt":202},23,"Low","Monitor","2026-10-17T07:21:21.891509+00:00"]