Description
IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authenticated attacker could send a specially crafted request that could allow enumeration of LDAP directory information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Content Navigator | 3.0.15.0, 26.0.0.0, 3.1.0.0, 3.2.0.0 | — |
References
- https://www.ibm.com/support/pages/node/7295227 vendor-advisory patch