CVE-2017-8028
In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when…
- Published
- Updated
- Reserved
- Assigned by
- dell
Description
In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting userSearch, authentication is allowed with an arbitrary password when the username is correct. This occurs because some LDAP vendors require an explicit operation for the LDAP bind to take effect.
Timeline
ID reserved
By dell
- 7 months later
· 7 months later
Published
- 7 years later
· 7 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | High8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 2.6% · top 15% of all CVEs (8 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.
Weakness
- authentication with arbitrary password
- CWE-287 (opens in a new tab)All about CWE-287 and its CVEs
Affected products
Spring-LDAP Spring-LDAP versions 1.3.0 2.3.1
- affected Spring-LDAP Spring-LDAP versions 1.3.0 2.3.1
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- Mavenorg.springframework.ldap:spring-ldap-coreGHSA-pjqh-2jcc-5j84 (opens in a new tab)
References (5)
- RHSA-2018:0319 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- DSA-4046 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- [debian-lts-announce] 20171119 [SECURITY] [DLA 1180-1] libspring-ldap-java security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- https://www.oracle.com/security-alerts/cpujan2021.html (opens in a new tab)x_refsource_MISCx_transferred
- https://pivotal.io/security/cve-2017-8028 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-pjqh-2jcc-5j84 (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2017-8028)Record last updated .