CVE-2016-6497

Published: Jan 18, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

95929

vdb-entry

x_refsource_BID

https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf

x_refsource_MISC

[directory-users] 20161029 Security vulnerability in Groovy LDAP API

mailing-list

x_refsource_MLIST

http://svn.apache.org/viewvc/directory/sandbox/szoerner/groovyldap/src/main/java/org/apache/directory/groovyldap/LDAP.java?r1=1765362&r2=1765361&pathrev=1765362&view=patch

x_refsource_CONFIRM

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2016-6497

Description

Affected Products

References