VYPR

Spring LDAP

by Cloudfoundry

Source repositories

CVEs (1)

  • CVE-2017-8028HigNov 27, 2017
    risk 0.46cvss 8.1epss 0.03

    In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication…