Exposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP API

ALTO 7.5CVE-2015-3250 · GHSA-cx3q-cv6w-mx4h · Published 07/09/2017 · updated 17/06/2026

En resumen

CVE-2015-3250 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a org.apache.directory.api:api-ldap-model, directory ldap api (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.1%, mayor que el 92.4% de las vulnerabilidades.
Solución: actualizar a 1.0.0-M31 o posterior.

Package	Affected versions	Patched versions
org.apache.directory.api:api-ldap-model Maven	`< 1.0.0-M31`	`1.0.0-M31`
directory ldap api apache	`≤ 1.0.0`	No fix yet

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

NVD description

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.