Skip to content
OpenAdvisories
High DSA-4046-1 1 CVE

libspring-ldap-java - security update

Published Nov 22, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 libspring-ldap-java 1.3.1.RELEASE-5+deb8u1

Vulnerabilities 1

  • High 8.1
    CVE-2017-8028

    Improper Authentication in Pivotal Spring-LDAP

    In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the aut…

    org.springframework.ldap:spring-ldap-core libspring-ldap-java Ubuntu Maven