CyberPower PowerPanel Enterprise DCIM - LDAP authentication path: If LDAP authentication is selected

Impact

If LDAP authentication is selected, the authentication mechanism is incomplete and every check can be bypassed. The operators most likely to be affected are the mature ones - the ones who wired their DCIM into corporate directory rather than using local accounts. Doing the responsible thing is what turns the bug on.

Who can reach it

Unauthenticated, remote, on any PowerPanel Enterprise instance configured for LDAP.

What to do

Upgrade PowerPanel Enterprise immediately. As an interim, switching off LDAP mode removes the vulnerable path but costs you central account control - a genuinely unpleasant trade, so prioritise the upgrade.

References