CVE-2018-18389 Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
Attackers can bypass authentication and log into Neo4j Enterprise Database by exploiting incorrect access control in specific LDAP and System Account configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-18389?
CVE-2018-18389 is a critical authentication bypass vulnerability in n/a, published on 16 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization, allows an attacker to log into the server by sending any valid username with an arbitrary password.
Weakness: CWE-287
Which versions are affected by CVE-2018-18389?
2 open source packages ship an affected version, including org.neo4j:neo4j-enterprise. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.neo4j:neo4j-enterprise Maven | From 3.4.0 | 3.4.9 |
org.neo4j:neo4j-enterprise Maven | From 3.4.0 | 3.4.9 |
Products include Neo4j Neo4j.
How do I fix CVE-2018-18389?
Upgrade org.neo4j:neo4j-enterprise to 3.4.9 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-18389 being exploited?
There is no known exploitation of CVE-2018-18389 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-34371 Deserialization of Untrusted Data in Neo4j
- CVE-2013-7259 Neo4J vulnerable to Cross-Site Request Forgery
- CVE-2024-34517 Neo4j Cypher component mishandles IMMUTABLE privileges
- CVE-2026-14587 Unathenticated connection can hold Bolt channel open
- CVE-2026-1471 Caching of authentication context
Sources
Also known as GHSA-h5f5-rj4r-42f6.