Exposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP API

ALTO 7.5CVE-2015-3250 · GHSA-cx3q-cv6w-mx4h · Published 07/09/2017 · updated 17/06/2026

In breve

CVE-2015-3250 è una vulnerabilità ALTO (CVSS 7.5) che riguarda org.apache.directory.api:api-ldap-model, directory ldap api (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.1%, superiore al 92.4% delle vulnerabilità.
Correzione: aggiornare a 1.0.0-M31 o successiva.

Package	Affected versions	Patched versions
org.apache.directory.api:api-ldap-model Maven	`< 1.0.0-M31`	`1.0.0-M31`
directory ldap api apache	`≤ 1.0.0`	No fix yet

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

NVD description

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.