CVE-2014-9217: Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards.

Security readout for executives and security teams

This vulnerability affected Graylog2 before version 0.92 when LDAP authentication was used. A remote attacker could bypass login checks using crafted wildcard input, potentially gaining unauthorized access to the Graylog web interface. The sources do not provide CVSS scoring or active exploitation evidence. Exposure is most likely limited to legacy Graylog2 or Graylog2-Web deployments before 0.92 that have LDAP authentication enabled. Internet-facing or broadly reachable administrative interfaces would increase business risk. Prioritize remediation for any remaining legacy Graylog2 deployment using LDAP, especially if exposed beyond a tightly controlled admin network. The vulnerability is old but directly affects authentication control. Mitigation focus: Upgrade Graylog2 to version 0.92 or later where feasible.; Review Graylog vendor release notes for the fixed version and migration guidance.; Restrict Graylog web access to trusted administrative networks..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.