{"action":"Upgrade org.neo4j:neo4j-enterprise to 3.4.9 or later.","affected":[{"fixed":"3.4.9","introduced":"3.4.0"}],"component":"org.neo4j:neo4j-enterprise","cve_ids":["CVE-2018-18389"],"ecosystem":"Maven","epss":0.0192,"exploited":false,"fixed_versions":["3.4.9"],"ghsa_id":"GHSA-h5f5-rj4r-42f6","id":"tcs_01M5N8ZQTSPFFSK3N3KF6P6TG4","modified_at":"2023-11-08T04:00:05.366349Z","published_at":"2018-10-17T17:31:26Z","references":["https://osv.dev/vulnerability/GHSA-h5f5-rj4r-42f6","https://nvd.nist.gov/vuln/detail/CVE-2018-18389","https://github.com/neo4j/neo4j/issues/12047","https://github.com/neo4j/neo4j/commit/46de5d01ae2741ffe04c36270fc62c6d490f65c9","https://github.com/advisories/GHSA-h5f5-rj4r-42f6","https://github.com/neo4j/neo4j"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h5f5-rj4r-42f6","url":"https://osv.dev/vulnerability/GHSA-h5f5-rj4r-42f6"}],"summary":"Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication"}