This vulnerability involves improper neutralization of special elements in LDAP queries within Red Hat Quay's external LDAP authentication process. Specifically, when an LDAP referral is returned, the username input is not properly escaped, allowing injection of LDAP filter metacharacters. This can be exploited to perform user-existence oracle attacks at the referral Directory Name (DN) and may affect which DN is used for password binding in multi-domain Active Directory setups. The vulnerability has a CVSS 3.1 base score of 4.8 (medium severity) with network attack vector and high attack complexity. Red Hat's advisory states that no effective mitigation or patch currently exists that meets their criteria for ease of use, applicability, and stability.

The vulnerability allows attackers to inject LDAP filter metacharacters during authentication referral processing, enabling user-existence oracle attacks against referral DNs. This could influence password binding behavior in multi-domain Active Directory environments. However, direct authentication bypass is prevented and directory enumeration is limited. There are no known exploits in the wild. The impact is limited to confidentiality and integrity with no availability impact.

Currently, there is no available fix or mitigation that meets Red Hat's standards for deployment and stability. Users should monitor Red Hat's advisory for updates. Red Hat recommends upgrading to fixed versions when they become available. Customers with a Technical Account Manager (TAM) can consult directly for guidance. No temporary workarounds or mitigations are provided in the advisory.