Unauthorized Database Access with LDAP Authentication

Detail name	Value
Changelog Number	10799
Type	Bug
Status	Resolved
Affected Versions	Exasol 6.1.0, Exasol 6.2.0, Exasol 7.0.0
Fix Versions	Exasol 6.1.12, Exasol 6.2.10, Exasol 7.0.2, EXASOL 6.0.17-p2
Resolution Date	2020-09-25

Description

Exasol has become aware of a critical security vulnerability affecting databases configured for LDAP authentication in some instances. This may allow an attacker to authenticate as any database user that is configured to use LDAP authentication.

Fix

This vulnerability has been resolved in the following Exasol versions:

• Exasol 7.0.2
• Exasol 6.2.10
• Exasol 6.1.12
• Exasol 6.0.17-p2

All customers with LDAP authentication are advised to update their system immediately.