{"action":"Upgrade org.apache.directory.api:apache-ldap-api to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"org.apache.directory.api:apache-ldap-api","cve_ids":["CVE-2018-1337"],"ecosystem":"Maven","epss":0.05152,"exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-cfw5-v7cw-69cw","id":"tcs_01M5N8S9H6MXQA0788SQZYMKNG","modified_at":"2024-04-19T20:01:20.803418Z","published_at":"2018-11-09T17:49:49Z","references":["https://osv.dev/vulnerability/GHSA-cfw5-v7cw-69cw","https://nvd.nist.gov/vuln/detail/CVE-2018-1337","https://github.com/advisories/GHSA-cfw5-v7cw-69cw","https://lists.apache.org/thread.html/d66081195e9a02ee7cc20fb243b60467d1419586eed28297d820768f@%3Cdev.directory.apache.org%3E","https://lists.apache.org/thread.html/r0e645b3f6ca977dc60b7cec231215c59a9471736c2402c1fef5a0616@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r1815fb5b0c345f571c740e7a1b48d7477647edd4ffcf9d5321e69446@%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r1a258430d820a90ff9d4558319296cc517ff2252327d7b3546d16749@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r4da40aa50cfdb2158898f2bc6df81feec1d42c6a06db6537d5cc0496@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r55e74532e7f9e84ecfa56b4e0a50a5fe0ba6f7a76880520e4400b0d7@%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r56b304fb9960c869995efbb31da3b9b7c6d53ee31f7f7048eb80434b@%3Cdev.kafka.apache.org%3E","http://www.securityfocus.com/bid/104744"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cfw5-v7cw-69cw","url":"https://osv.dev/vulnerability/GHSA-cfw5-v7cw-69cw"}],"summary":"Credential leak in org.apache.directory.api:apache-ldap-api"}