Описание
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
Ссылки
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Technical DescriptionThird Party Advisory
- Patch
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Technical DescriptionThird Party Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:apache:groovy_ldap:*:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.05729
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-254
Связанные уязвимости
CVSS3: 7.5
redhat
почти 10 лет назад
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
CVSS3: 7.5
github
больше 4 лет назад
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
EPSS
Процентиль: 92%
0.05729
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-254