PT-2023-20194 · Apache · Apache Derby

4Ra1N · CVE-2023-25613 · Publicado 2023-02-20 · Atualizado 2025-08-11

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Kerby versions prior to 2.0.3

Description An LDAP Injection issue exists in the LdapIdentityBackend of Apache Kerby. This allows for potential exploitation.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the LdapIdentityBackend until a patch is applied.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2023-25613

GHSA-337F-XR2X-6FCF

Produtos afetados

Apache Derby

Referências · 10

• https://github.com/apache/directory-kerby · Nota
• https://lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-25613 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-25613 · Nota de Segurança
• https://t.me/cvenotify/44681 · Publicação no Telegram
• https://t.me/cveNotify/131659 · Publicação no Telegram
• https://t.me/cvenotify/68579 · Publicação no Telegram
• https://t.me/cibsecurity/58525 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-337f-xr2x-6fcf · Aviso do Fabricante
• https://t.me/breachdetector/207052 · Publicação no Telegram