Description

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.

Remediation

References

CVE-2016-6501

Related Vulnerabilities

WordPress Plugin Rencontre-Dating Site Security Bypass (1.6.9)

LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-5017)

WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)

WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Local File Inclusion (1.4.3)

Oracle JRE CVE-2013-2412 Vulnerability (CVE-2013-2412)

Severity

Critical

Classification

CVE-2016-6501 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities