high7.5
CVE-2015-3250
Exposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP API
Impact
Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.directory.api:api-ldap-model | <= 1.0.0-M30 | 1.0.0-M31 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Directory Ldap Api | through 1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://directory.apache.org/api/#news_1
- http://www.openwall.com/lists/oss-security/2015/07/07/11
- http://www.openwall.com/lists/oss-security/2015/07/07/5
- https://bugzilla.redhat.com/show_bug.cgi?id=1241163
- https://github.com/advisories/GHSA-cx3q-cv6w-mx4h
- https://nvd.nist.gov/vuln/detail/CVE-2015-3250