description: Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.
problem types: Injection Attack
affected:
{
product: Apache Karaf
vendor: Apache Software Foundation
versions:
status: affected, version: prior to 4.0.8
}