CVE-2018-1000134
1 advisory.
Maven/com.unboundid:unboundid-ldapsdk CVE-2018-1000134: critical 9.8
Weak Password Requirements in UnboundID LDAP SDK
Action: Upgrade com.unboundid:unboundid-ldapsdk to 4.0.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 4.0.5 | - |
Fixed versions
| 4.0.5 |
Sources
- osv: GHSA-qwq9-8rpf-8mp7
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000134
- https://github.com/pingidentity/ldapsdk/issues/40
- https://github.com/pingidentity/ldapsdk/commit/801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb
- https://github.com/pingidentity/ldapsdk/commit/8471904a02438c03965d21367890276bc25fa5a6#diff-f6cb23b459be1ec17df1da33760087fd
- https://access.redhat.com/errata/RHSA-2018:1713
- https://github.com/pingidentity/ldapsdk
- http://www.securityfocus.com/bid/103458
CVE-2018-1000134 · published · modified · JSON