CVE-2016-8750

Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP

published February 19, 2018

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05179 · 92.4th percentile
Published
2018-02-19T15:00Z
EPSS history
Timeline
  • 19 FEB 15:00Z
    Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP
    cvelistv5