CVE-2016-6497 in LDAP API

Sumário

de MITRE

main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 01/08/2016
• Divulgação: 18/01/2017
• Moderação: aceite
• Entrada: VDB-95505
• CPE: pronto
• CWE: CWE-254 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.05729
• KEV: não
• Atividades: muito baixo
• Sector: Government, Education, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6497
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6497
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6497/