Описание
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
Ссылки
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Technical DescriptionThird Party Advisory
- Patch
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Technical DescriptionThird Party Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:apache:groovy_ldap:*:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.03008
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-254
Связанные уязвимости
CVSS3: 7.5
redhat
больше 9 лет назад
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
CVSS3: 7.5
github
больше 3 лет назад
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
EPSS
Процентиль: 86%
0.03008
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-254