CVE-2013-3107 Information

Description

VMware vCenter Server 5.1 before Update 1 when anonymous LDAP binding for Active Directory is enabled allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.

Reference

http://www.vmware.com/security/advisories/VMSA-2013-0006.html