Description

In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password.

Remediation

References

CVE-2017-14596

Related Vulnerabilities

Jetty Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7658)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0790)

WordPress Plugin Modern Events Calendar Lite Security Bypass (5.1.6)

PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19594)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5406)

Severity

Critical

Classification

CVE-2017-14596 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities