CVE-2016-6500 | BDVDB-2026-81271 Detail

Description#

Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://backstage.forgerock.com/knowledge/kb/article/a96963547

Exploit#

No public exploit known

History#

Version 12017-02-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.