[CRITICAL] CVE-2016-2403: Unauthorized access on a misconfigured Ldap server when using an empty password

PKSA-nz2g-y52j-n79q CVE-2016-2403 GHSA-wvj5-r78r-hhfq

Affected package: symfony/security-core

Affected version: >=2.8.0,<2.8.6|>=3.0.0,<3.0.6

Reported by:
GitHub, FriendsOfPHP/security-advisories