LDAP anonymous access to directory

Risk Level: Medium risk vulnerability  Medium

Check or Attack Name: LDAP NullBind

Platforms: LDAP
Description:

The NULL bind entry allows a user to access the LDAP directory as anonymous.

Remedy:

Disable the NULL bind entry or control the entry with Access Control Lists (ACL).

References:

X-Force Logo
Know Your Risks