CVE-2014-3999: Horde LDAP

High severity, CVSS 8.1. EPSS: 2.4% chance of exploitation in the next 30 days.

The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN.

Affected products

• Horde Horde LDAP: before 2.0.6 (fixed in 2.0.6)

Published 2018-04-10. Last modified 2026-06-17.