CVE-2014-9217 (graylog2)

Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards.