Vulnerability · Published Jun 19, 2020 · Assigned by apache
CVE-2020-9495
Medium 5.3
In plain English
A medium-severity security flaw in Apache Archiva. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.1% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.apache.archiva:archiva | 2.2.5 | GHSA-v83p-xwm9-v4g8 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Apache Archiva | Apache Archiva 2.2.4 and below |
References
- http://archiva.apache.org/security.html#CVE-2020-9495 x_refsource_MISC
- [maven-users] 20200619 [SECURITY] CVE-2020-9495: Apache Archiva login service is vulnerable to LDAP injection mailing-list, x_refsource_MLIST
- [archiva-dev] 20200619 [SECURITY] CVE-2020-9495: Apache Archiva login service is vulnerable to LDAP injection mailing-list, x_refsource_MLIST
- [archiva-users] 20200619 [SECURITY] CVE-2020-9495: Apache Archiva login service is vulnerable to LDAP injection mailing-list, x_refsource_MLIST
- [oss-security] 20200619 [SECURITY] CVE-2020-9495: Apache Archiva login service is vulnerable to LDAP injection mailing-list, x_refsource_MLIST
- [announce] 20200619 [SECURITY] CVE-2020-9495: Apache Archiva login service is vulnerable to LDAP injection mailing-list, x_refsource_MLIST