1. Critical SSH Authentication Flaw Bypasses LDAP Account Disabling, Allowing Banned Users Persistent Access
A critical security vulnerability allows users with disabled or banned LDAP accounts to retain full SSH access to artifact repositories indefinitely. The flaw exists because SSH authentication paths fail to check user account status, creating a dangerous bypass of standard access controls. While web and JWT authenticat...