Lucene search
Veracode Vulnerability DatabaseVERACODE:36277HistoryJul 06, 2022 - 7:52 p.m.
Arbitrary Code Injection
2022-07-0619:52:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
arbitrary code injection
ldap
webfrontend
ldap search configuration
EPSS
0.002
Percentile
57.3%
LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the user name field at login could be used to enumerate LDAP data. This is only the case for LDAP search configuration. This issue has been fixed in version 8.0.
Related
cnvd
cnvd
LDAP Account Manager Injection Vulnerability (CNVD-2022-53544)
2022-06-30 00:00:00
ubuntucve
ubuntucve
CVE-2022-31088
2022-06-27 00:00:00
cve
cve
CVE-2022-31088
2022-06-27 21:15:08
nvd
nvd
CVE-2022-31088
2022-06-27 21:15:08
cvelist
cvelist
CVE-2022-31088 Unauthenticated LDAP Injection in ldap-account-manager
2022-06-27 20:45:18
debiancve
debiancve
CVE-2022-31088
2022-06-27 21:15:08
prion
prion
Design/Logic Flaw
2022-06-27 21:15:00
osv
osv
CVE-2022-31088
2022-06-27 21:15:08
ldap-account-manager - security update
2022-07-05 00:00:00
debian
debian
[SECURITY] [DSA 5177-1] ldap-account-manager security update
2022-07-05 18:28:44
openvas
openvas
Debian: Security Advisory (DSA-5177-1)
2022-07-07 00:00:00
nessus
nessus
Debian DSA-5177-1 : ldap-account-manager - security update
2022-07-06 00:00:00