Lucene search

ApacheCVE-2020-9495

HistoryJun 19, 2020 - 7:15 p.m.

CVE-2020-9495

2020-06-1919:15:12

CWE-74

apache

web.nvd.nist.gov

cve-2020-9495

apache archiva

ldap injection

nvd

ldap server

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.013

Percentile

85.9%

JSON

Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.

Affected configurations

Nvd

Vulners

Node

apachearchivaRange<2.2.5

VendorProductVersionCPE
apachearchiva*cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	archiva	*	cpe:2.3:a:apache:archiva::::::::

CNA Affected

[
  {
    "product": "Apache Archiva",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Archiva 2.2.4 and below"
      }
    ]
  }
]

References

archiva.apache.org/security.html#CVE-2020-9495

www.openwall.com/lists/oss-security/2020/06/19/1

lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%3Cannounce.apache.org%3E

lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%3Cdev.archiva.apache.org%3E

lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%3Cusers.archiva.apache.org%3E

lists.apache.org/thread.html/r7ae580f700ade57b00641a70a5c639a3ba576893bbf7f9fd93bc491d%40%3Cusers.maven.apache.org%3E

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.013

Percentile

85.9%

JSON

Related for CVE-2020-9495