CVE-2016-6501 JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.
CriticalCVSS 9.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jfrog artifactory | <= 4.10 | No fix listed |
References
- 94855 vdb-entry
- www.blackhat.com not-applicable
- www.jfrog.com release-notes vendor-advisory