An unchecked condition in the LdapPasswordAuthenticator of the sshd-ldap component allows an attacker to bypass authentication checks, enabling unauthorized users to authenticate as any LDAP user. This flaw represents a severe improper access control weakness and can grant full SSH access to an attacker without the need for valid credentials, directly compromising confidentiality and integrity of the system.

Apache Software Foundation’s Apache MINA SSHD when the optional sshd-ldap module is present and an LdapPasswordAuthenticator is configured for password authentication. Affected versions range from 1.2.0 through 2.19.0 and from 3.0.0‑M1 through 3.0.0‑M5. Clients and servers using these releases must be considered vulnerable until they are upgraded to 2.20.0 or 3.0.0‑M6.

The CVSS score of 9.1 indicates critical severity, and while the EPSS score is not available, the lack of KEV listing does not reduce the inherent risk. The vulnerability can be exploited by any entity able to communicate with the SSH server that has been configured to use LDAP password authentication, making the attack vector network‑based and readily automated. The impact is full unauthorized SSH access, potentially leading to system compromise.