CVE-2016-6497: High severity Apache Groovy LDAP vulnerability
Apache could allow a remote attacker to execute arbitrary code on the system, caused by a LDAP entry poisoning vulnerability in main/java/org/apache/directory/groovyldap/LDAP.java. By leveraging setting returnObjFlag to true for all search methods, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Other sources
main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-6497?
CVE-2016-6497 is a LDAP entry poisoning vulnerability in the Groovy LDAP API in Apache, which allows a remote attacker to execute arbitrary code on the system.
What is the severity of CVE-2016-6497?
The severity of CVE-2016-6497 is high, with a severity value of 7.5.
How can an attacker exploit CVE-2016-6497?
An attacker can exploit CVE-2016-6497 by leveraging the setting returnObjFlag to true for all search methods in the LDAP.java file.
Who is affected by CVE-2016-6497?
IBM GDE version 3.0.0.2 and Apache Groovy LDAP are affected by CVE-2016-6497.
How to fix CVE-2016-6497?
Update the Groovy LDAP API in Apache to the latest version and apply any patches provided by the vendor.