https://userapps.support.sap.com/sap/support/knowledge/en/2017436
2017436 - LDAP Authentication Allowing Blank Passwords | SAP Knowledge Base Article
Lightweight Directory Access Protocol (LDAP) users are allowed to access the database after providing an empty password.
ldap authenticationsap knowledgeallowingblankpasswords