Permissions, Privileges, and Access Controls
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.
Advisories for Gem/Ldap_fluff package
2013