Exploit for Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure CVE-2023-5003

Name: Exploit for Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure CVE-2023-5003
Rating: 5 (77 reviews)

2023-09-25 | CVSS 5.0

## https://sploitus.com/exploit?id=WPEX-ID:91F4E500-71F3-4EF6-9CC7-24A7C12A5748
This requires the plugin's `Log Authentication Requests` setting to be set in LDAP/Active Directory Login for Intranet > Authentication Report.

Once some authentication issues were logged, and the administrator exported said logs, the resulting CSV file remains publicly accessible at the following address:

curl {{base_url}}/wp-content/ldap-authentication-report.csv