Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2

Summary In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2 Vulnerability Details CVEID:CVE-2018-1000134 DESCRIPTION: Ping Identity UnboundID LDAP SDK could allow a remote attacker to...

br.com.uiltonsites:servlet-framework (=3.0.0), com.a9ski:ldap-um (=1.0.0) +496 more potentially affected by CVE-2018-1000134 via com.unboundid:unboundid-ldapsdk (>=1.1.3 <=4.0.4)

com.unboundid:unboundid-ldapsdk MAVEN version =1.1.3, =5.0.7.3, =1.0.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.1.0, =1.1.0, =3.1.2, =1.31.2, =1.25.0, =1.36.1 and more Source cves: CVE-2018-1000134 Source advisory: OSV:GHSA-QWQ9-8RPF-8MP7...

Fedora 28 : unboundid-ldapsdk (2018-e8635ed222)

Rebase packages to version: 4.0.5 CVE-2018-1000134 has been fixed in 4.0.5 release of the UnboundID LDAP SDK for Java. A blog post has been written covering the details of this CVE and is available at https://nawilson.com/2018/03/19/cve-2018-1000134-and-the-unboundid-lda p-sdk-for-java/ Further...

Moderate: Red Hat Security Advisory: unboundid-ldapsdk security update

An update for unboundid-ldapsdk is now available for Red Hat Virtualization Engine 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Fedora 27 : unboundid-ldapsdk (2018-0a473d6e7b)

Rebase packages to version: 4.0.5 CVE-2018-1000134 has been fixed in 4.0.5 release of the UnboundID LDAP SDK for Java. A blog post has been written covering the details of this CVE and is available at https://nawilson.com/2018/03/19/cve-2018-1000134-and-the-unboundid-lda p-sdk-for-java/ Further...

Fedora Update for unboundid-ldapsdk FEDORA-2018-0a473d6e7b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : unboundid-ldapsdk (2018-c188d3f09a)

Rebase packages to version: 4.0.5 CVE-2018-1000134 has been fixed in 4.0.5 release of the UnboundID LDAP SDK for Java. A blog post has been written covering the details of this CVE and is available at https://nawilson.com/2018/03/19/cve-2018-1000134-and-the-unboundid-lda p-sdk-for-java/ Further...

CVE-2018-1000134

CVE-2018-1000134 affects the UnboundID LDAP SDK for Java. The issue is an Incorrect Access Control in the SimpleBindRequest.process function that does not check for an empty password in synchronous mode, potentially allowing authentication bypass by a valid username with an empty password. The vu...