Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
CWE-287, CWE-287