Request Tracker LDAP Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in Request Tracker (RT) versions 5.0.9 and prior, as well as 6.0.0 through 6.0.2, when LDAP or Active Directory is used for user authentication. Under certain LDAP server configurations, an attacker could authenticate as any LDAP-backed RT user without valid credentials.

Impact

Exploitation of this vulnerability allows an attacker to bypass authentication and gain access as an LDAP user, potentially leading to unauthorized actions or access within the RT system.

Remediation

Users are advised to upgrade to RT version 5.0.10 or 6.0.3. For those unable to upgrade immediately, a temporary workaround is to review the LDAP server's authentication policy to ensure it rejects unauthenticated bind attempts.