Description

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.

Remediation

References

CVE-2016-6501

Related Vulnerabilities

WordPress Plugin Simple Fields Cross-Site Scripting (1.4.10)

Joomla! Core 3.x.x Cross-Site Request Forgery (3.7.0 - 3.9.18)

OpenSSL Resource Management Errors Vulnerability (CVE-2006-2940)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-3384)

ZenCart Improper Input Validation Vulnerability (CVE-2009-4321)

Severity

Critical

Classification

CVE-2016-6501 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities