LDAP User Enumeration

info Nessus Plugin ID 45478

Synopsis

Nessus was able to get the list of users on the remote LDAP server.

Description

By using the search base gathered by plugin ID 25701, Nessus was able to enumerate the list of users in the remote LDAP directory.

Solution

Configure the LDAP server to require authentication.

Plugin Details

Severity: Info

ID: 45478

File Name: ldap_users.nasl

Version: 1.8

Type: remote

Family: Misc.

Published: 4/9/2010

Updated: 8/1/2023

Supported Sensors: Nessus