Apache Kerby LDAP Injection Vulnerability

Apache Kerby is a Java Kerberos binding from the Apache Foundation (USA). Provides a rich, intuitive and interoperable implementation, libraries, KDCs and various facilities to integrate PKI, OTP and tokens (OAuth2) as needed for modern environments such as cloud, Hadoop and mobile. LDAP injection vulnerabilities exist in versions of Apache Kerby prior to 2.0.3, which stem from the failure of LdapIdentityBackend to correctly validate user input. An attacker could exploit this vulnerability to cause LDAP injection.