The vulnerability is an LDAP injection flaw caused by improper neutralization of special elements during DN construction. This weakness can allow an attacker to manipulate LDAP queries, leading to authentication bypass and potentially unauthorized access to the system. The flaw is identified as CWE-90.

Apache OFBiz by the Apache Software Foundation is affected. Any installation using a version prior to 24.09.06 is vulnerable. Users should examine whether their product uses these earlier releases.

The attack vector is likely through the authentication interface, where user-supplied credentials or parameters are incorporated into an LDAP query without adequate escaping. Based on the description, it is inferred that an attacker could craft input that alters the LDAP search and gain access. The exploit is of local or remote nature depending on the deployment. EPSS information is not available and the vulnerability is not listed in CISA KEV, indicating no known public exploits at this time; however, the severity of authentication bypass warrants careful consideration.