CWE:
 

Sorry. No results for Bugtraq WLB2


CVEMAP Search Results

CVE
Details
Description
2019-07-01
Medium
CVE-2019-4297

Updating...
 

 
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761.

 
2018-06-22
Medium
CVE-2018-12689

Vendor: Phpldapadmin
Software: Phpldapadmin
 

 
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel.

 
2018-03-06
Medium
CVE-2018-5730

Vendor: MIT
Software: Kerberos
 

 
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.

 
2018-02-19
Low
CVE-2016-8750

Vendor: Apache
Software: Karaf
 

 
Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

 
2018-02-01
Medium
CVE-2011-4069

Vendor: Packetfence
Software: Packetfence
 

 
html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username.

 
2017-11-17
Medium
CVE-2017-4927

Vendor: Vmware
Software: Vcenter server
 

 
VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service.

 
2017-01-12
Medium
CVE-2016-9299

Vendor: Fedoraproject
Software: Fedora
 

 
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.

 

 


Copyright 2019, cxsecurity.com

 

Back to Top