{"action":"Upgrade org.springframework.ldap:spring-ldap-core to 2.3.2 or later.","affected":[{"fixed":"2.3.2","introduced":"1.3.0"}],"component":"org.springframework.ldap:spring-ldap-core","cve_ids":["CVE-2017-8028"],"ecosystem":"Maven","epss":0.02606,"exploited":false,"fixed_versions":["2.3.2"],"ghsa_id":"GHSA-pjqh-2jcc-5j84","id":"tcs_01M5N97NQFDPP0S232PYGQJ179","modified_at":"2024-04-10T18:57:08.806686Z","published_at":"2022-05-13T01:12:09Z","references":["https://osv.dev/vulnerability/GHSA-pjqh-2jcc-5j84","https://nvd.nist.gov/vuln/detail/CVE-2017-8028","https://github.com/spring-projects/spring-ldap/commit/08e8ae289bbd1b581986c7238604a147119c1336","https://access.redhat.com/errata/RHSA-2018:0319","https://github.com/spring-projects/spring-ldap","https://lists.debian.org/debian-lts-announce/2017/11/msg00026.html","https://pivotal.io/security/cve-2017-8028","https://www.debian.org/security/2017/dsa-4046","https://www.oracle.com/security-alerts/cpujan2021.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-pjqh-2jcc-5j84","url":"https://osv.dev/vulnerability/GHSA-pjqh-2jcc-5j84"}],"summary":"Improper Authentication in Pivotal Spring-LDAP"}