Medium severity6.5NVD Advisory· Published Feb 19, 2018· Updated Jun 17, 2026

CVE-2016-8750

Description

Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.karaf:apache-karafMaven	< 4.0.8	4.0.8

Affected products

ghsa-coords
pkg:maven/org.apache.karaf/apache-karaf
Range: < 4.0.8
Apache Software Foundation/Apache Karafv5
Range: prior to 4.0.8

Patches

Vulnerability mechanics

References

karaf.apache.org/security/cve-2016-8750.txtnvdPatchVendor AdvisoryWEB
www.securityfocus.com/bid/103098nvdThird Party AdvisoryVDB EntryWEB
access.redhat.com/errata/RHSA-2018:1322nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-chj8-5xgw-wcvjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-8750ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000