Description
Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.
Remediation
References
http://directory.apache.org/api/#news_1
http://www.openwall.com/lists/oss-security/2015/07/07/11
http://www.openwall.com/lists/oss-security/2015/07/07/5
https://bugzilla.redhat.com/show_bug.cgi?id=1241163
Related Vulnerabilities
CVE-2012-1089 Vulnerability in maven package org.apache.wicket:wicket-core
CVE-2013-6447 Vulnerability in maven package org.jboss.seam:jboss-seam
CVE-2016-3084 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-login
CVE-2023-50768 Vulnerability in maven package org.sonatype.nexus.ci:nexus-jenkins-plugin