CVE-2022-45046

This flaw targets the camel-ldap package. According to the maintainers this CVE should be retracted soon. Mitigation Maintainers have added a documentation detail regarding LDAP Injection in Camel LDAP component. Please check the link for more information...

LDAP Injection

Camel LDAP is vulnerable to LDAP injection. The vulnerability is due to the process function in LdapProducer.java when using the filter options which allows an attacker to inject and execute LDAP queries into the system...

uk.nhs.ciao:ciao-spine-sds (0.1), uk.nhs.ciao:ciao-transport-spine (0.1) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.13.4)

org.apache.camel:camel-ldap MAVEN version 2.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - uk.nhs.ciao:ciao-spine-sds 0.1 - uk.nhs.ciao:ciao-transport-spine 0.1 Source cves: CVE-2022-45046 Source...

org.apache.camel:camel-ldap-starter (2.18.0) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.18.0)

org.apache.camel:camel-ldap MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.18.0 Source cves: CVE-2022-45046 Source advisory:...

io.fabric8.funktion.connector:connector-ldap (>=1.1.9, <=1.1.55), org.apache.camel:camel-ldap-starter (2.18.1) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.18.1)

org.apache.camel:camel-ldap MAVEN version 2.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - io.fabric8.funktion.connector:connector-ldap =1.1.9, =1.1.55 - org.apache.camel:camel-ldap-starter 2.18....

org.apache.camel:camel-ldap-starter (2.18.2) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.18.2)

org.apache.camel:camel-ldap MAVEN version 2.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.18.2 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.18.3) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.18.3)

org.apache.camel:camel-ldap MAVEN version 2.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.18.3 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.18.4) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.18.4)

org.apache.camel:camel-ldap MAVEN version 2.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.18.4 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.18.5) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.18.5)

org.apache.camel:camel-ldap MAVEN version 2.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.18.5 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.19.0) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.19.0)

org.apache.camel:camel-ldap MAVEN version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.19.0 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.19.1) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.19.1)

org.apache.camel:camel-ldap MAVEN version 2.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.19.1 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.19.2) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.19.2)

org.apache.camel:camel-ldap MAVEN version 2.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.19.2 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.19.3) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.19.3)

org.apache.camel:camel-ldap MAVEN version 2.19.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.19.3 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.19.4) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.19.4)

org.apache.camel:camel-ldap MAVEN version 2.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.19.4 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.19.5) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.19.5)

org.apache.camel:camel-ldap MAVEN version 2.19.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.19.5 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.20.0) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.20.0)

org.apache.camel:camel-ldap MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.20.0 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.20.1) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.20.1)

org.apache.camel:camel-ldap MAVEN version 2.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.20.1 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.20.2) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.20.2)

org.apache.camel:camel-ldap MAVEN version 2.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.20.2 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.20.3) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.20.3)

org.apache.camel:camel-ldap MAVEN version 2.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.20.3 Source cves: CVE-2022-45046 Source advisory:...

org.apache.camel:camel-ldap-starter (2.20.4), org.qubership.mockingbird:mockingbird-transport-ldap (>=4.4.354, <=4.4.367) potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (2.20.4)

org.apache.camel:camel-ldap MAVEN version 2.20.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-ldap and may be impacted: - org.apache.camel:camel-ldap-starter 2.20.4 - org.qubership.mockingbird:mockingbird-transport-ldap...