PT-2018-9308 · Unboundid · Unboundid Ldap Sdk

Sshke · Published 2018-03-16 · Updated 2022-05-13 · CVE-2018-1000134

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: UnboundID LDAP SDK versions from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6

Description: The issue concerns an Incorrect Access Control vulnerability in the process function of the SimpleBindRequest class. This vulnerability occurs when the function does not check for an empty password while running in synchronous mode, potentially allowing an attacker to impersonate any valid user by providing a valid username and an empty password against servers that do not perform additional validation, as per the guidelines in RFC 4513, section 5.1.1.

Recommendations: For UnboundID LDAP SDK versions from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, update to a version after commit 8471904a02438c03965d21367890276bc25fa5a6 to resolve the issue. As a temporary workaround, consider adding additional validation on the server-side to check for empty passwords, as recommended by RFC 4513, section 5.1.1, until the update can be applied.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2018-1000134

GHSA-QWQ9-8RPF-8MP7

RHSA-2018:1713

Affected Products

Unboundid Ldap Sdk

References · 9

• https://access.redhat.com/errata/RHSA-2018:1713 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000134 · Security Note
• https://osv.dev/vulnerability/GHSA-qwq9-8rpf-8mp7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000134 · Vendor Advisory
• https://github.com/pingidentity/ldapsdk · Note
• https://github.com/pingidentity/ldapsdk/issues/40 · Note
• https://github.com/pingidentity/ldapsdk/commit/801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb · Note
• https://github.com/pingidentity/ldapsdk/commit/8471904a02438c03965d21367890276bc25fa5a6#diff-f6cb23b459be1ec17df1da33760087fd · Note
• http://securityfocus.com/bid/103458 · Note