IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
5.5Orta

CVE-2026-0636LDAP Injection Vulnerability in LDAPStoreHelper.java

Legion of the Bouncy Castle Inc. BC-JAVA; Red Hat Red Hat AMQ Broker 7.12.7; Red Hat Red Hat AMQ Broker 7.13.5; Red Hat Red Hat AMQ Broker 7.14.1 Yayım: (6 ay önce)

Açıklama

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Zayıflık türü (CWE): CWE-90

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
jboss enterprise application platform 8.1 —
jboss enterprise application platform els 7.4 —
Legion of the Bouncy Castle Inc. BC-JAVA 1.74 – < 1.80.2, 1.81 – < 1.81.1, 1.82 – < 1.84
ocp tools 4.12 —
ocp tools 4.13 —
ocp tools 4.14 —
ocp tools 4.15 —
ocp tools 4.16 —
ocp tools 4.17 —
ocp tools 4.18 —
ocp tools 4.19 —
ocp tools 4.20 —
ocp tools 4.21 —
ocp tools 4.22 —
openshift devspaces 3.28 —
quarkus 3.20 —
quarkus 3.27 —
Red Hat Cryostat 4 —
Red Hat OpenShift Developer Tools and Services all versions
Red Hat OpenShift Developer Tools and Services 4.12 all versions
Red Hat OpenShift Developer Tools and Services 4.13 all versions
Red Hat OpenShift Developer Tools and Services 4.14 all versions
Red Hat OpenShift Developer Tools and Services 4.15 all versions
Red Hat OpenShift Developer Tools and Services 4.16 all versions
Red Hat OpenShift Developer Tools and Services 4.17 all versions
Red Hat OpenShift Developer Tools and Services 4.18 all versions
Red Hat OpenShift Developer Tools and Services 4.19 all versions
Red Hat OpenShift Developer Tools and Services 4.20 all versions
Red Hat OpenShift Developer Tools and Services 4.21 all versions
Red Hat OpenShift Developer Tools and Services 4.22 all versions
Red Hat Red Hat AMQ Broker 7.12.7 —
Red Hat Red Hat AMQ Broker 7.13.5 —
Red Hat Red Hat AMQ Broker 7.14.1 —
Red Hat Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 —
Red Hat Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14 all versions
Red Hat Red Hat build of Quarkus 3.20.6.SP1 —
Red Hat Red Hat build of Quarkus 3.27.3.SP1 —
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 all versions
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 all versions
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 all versions
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 all versions
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 all versions
Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GA all versions
Red Hat Red Hat OpenShift Dev Spaces 3.28 all versions

Kaynaklar ve yamalar