RHSA-2018:1713 Red Hat Security Advisory: unboundid-ldapsdk security update

Bulletin has no description...

br.com.uiltonsites:servlet-framework (3.0.0), com.a9ski:ldap-um (1.0.0) +456 more potentially affected by CVE-2018-1000134 via com.unboundid:unboundid-ldapsdk (>=1.1.3, <=4.0.4)

com.unboundid:unboundid-ldapsdk MAVEN version =1.1.3, =5.0.7.3, =1.0.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.1.2, =1.25.0, =1.25.0, =0.5.0, =0.5.0, =1.0.1 and more Source cves: CVE-2018-1000134 Source advisory: OSV:GHSA-QWQ9-8RPF-8MP7...

br.com.uiltonsites:servlet-framework (3.0.0), com.a9ski:ldap-um (1.0.0) +456 more potentially affected by CVE-2018-1000134 via com.unboundid:unboundid-ldapsdk (>=1.1.3, <=4.0.4)

com.unboundid:unboundid-ldapsdk MAVEN version =1.1.3, =5.0.7.3, =1.0.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.1.2, =1.25.0, =1.25.0, =0.5.0, =0.5.0, =1.0.1 and more Source cves: CVE-2018-1000134 Source advisory: GHSA-QWQ9-8RPF-8MP7...

Improper Access Control

unboundid-ldapsdk is vulnerable to improper access control. The vulnerability exists due to the lack of check for password in the synchronous process operation found in SimpleBindRequest...

Fedora 27 : unboundid-ldapsdk (2018-0a473d6e7b)

Rebase packages to version: 4.0.5 CVE-2018-1000134 has been fixed in 4.0.5 release of the UnboundID LDAP SDK for Java. A blog post has been written covering the details of this CVE and is available at https://nawilson.com/2018/03/19/cve-2018-1000134-and-the-unboundid-lda p-sdk-for-java/ Further...

Fedora Update for unboundid-ldapsdk FEDORA-2018-0a473d6e7b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for unboundid-ldapsdk FEDORA-2018-c188d3f09a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Improper Access Control

unboundid-ldapsdk is vulnerable to improper access control. The vulnerability exists due to the lack of check for password in the synchronous process operation found in SimpleBindRequest...

br.com.uiltonsites:servlet-framework (3.0.0), com.a9ski:ldap-um (1.0.0) +456 more potentially affected by CVE-2018-1000134 via com.unboundid:unboundid-ldapsdk (>=1.1.3, <=4.0.4)

com.unboundid:unboundid-ldapsdk MAVEN version =1.1.3, =5.0.7.3, =1.0.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.1.2, =1.25.0, =1.25.0, =0.5.0, =0.5.0, =1.0.1 and more Source cves: CVE-2018-1000134 Source advisory: MEND:CVE-2018-1000134...