Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:10770
HistoryJan 15, 2019 - 8:52 a.m.

Denial Of Service (DoS)

2019-01-1508:52:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.002

Percentile

64.8%

389 Directory Server is vulnerable to denial of service. Get Effective Rights (GER) search queries are not properly handled when the attribute list contains the @ characters. An attacker is able submit search queries containing multiple @ characters to crash the application.