An attacker can use the unrestricted LDAP queries to determine configuration entries
CWE-200, NVD-CWE-Other