LDAP Injection

🗓️ 06 Dec 2022 09:35:13Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 14 Views

Camel LDAP vulnerability in LdapProducer.java process function allowing LDAP injectio

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	7 Mar 202303:26	–	ibm
ATTACKERKB	CVE-2022-45046	5 Dec 202214:15	–	attackerkb
Circl	CVE-2022-45046	5 Dec 202216:39	–	circl
CNNVD	编号撤回	5 Dec 202200:00	–	cnnvd
CVE	CVE-2022-45046	5 Dec 202200:00	–	cve
Cvelist	CVE-2022-45046	5 Dec 202200:00	–	cvelist
EUVD	EUVD-2022-7756	3 Oct 202520:07	–	euvd
Github Security Blog	camel-ldap component allows LDAP Injection when using the filter option	5 Dec 202215:30	–	github
NVD	CVE-2022-45046	5 Dec 202214:15	–	nvd
OSV	GHSA-W66J-XC7R-M2JV camel-ldap component allows LDAP Injection when using the filter option	5 Dec 202215:30	–	osv

Vulners

Node

-camel_::_ldapMatch3.19.0

OR

-camel_::_ldapMatch3.19.0

OR

-camel_::_ldapRange≤2.5.0

OR

-camel_::_ldapRange≤3.18.3

Source	Link
issues	www.issues.apache.org/jira/browse/CAMEL-186906
camel	www.camel.apache.org/security/CVE-2022-45046.html
github	www.github.com/apache/camel/commit/c543ee1ebd632566618293f8e2d3fc2969198283
github	www.github.com/apache/camel/commit/ad44f93fa9df74b2accde0b8812f6798f92ad0bf
github	www.github.com/apache/camel/commit/c46cbcc6bee94ec631e7898b0c944cae98b4a071
github	www.github.com/apache/camel/commit/961bc8d51a4331eff982dc5be35b38e333e9fca8
github	www.github.com/advisories/GHSA-w66j-xc7r-m2jv
openwall	www.openwall.com/lists/oss-security/2022/12/05/2
openwall	www.openwall.com/lists/oss-security/2022/12/05/2

12 Dec 2022 19:40Current

3.6Low risk

Vulners AI Score3.6

camel ldap ldapproducer.java process function ldap injection filter options