CVE-2026-59652
説明
A flaw was found in Bouncy Castle for Java, specifically within the legacy jdk1.4 LDAPStoreHelper. This vulnerability allows for LDAP filter injection, where an attacker could provide specially crafted input. This could lead to unauthorized information disclosure or modification of data from the Lightweight Directory Access Protocol (LDAP) directory.
詳細
Red Hat products only ship jdk15 / jdk18 based artifacts. This vulnerability affects legacy jdk1.4. Red hat products are not affected by this vulnerability.
脆弱性の原因 (CWE) の理解
Confidentiality,Integrity,Availability
Technical Impact: Execute Unauthorized Code or Commands; Read Application Data; Modify Application Data
An attacker could include input that changes the LDAP query which allows unintended commands or code to be executed, allows sensitive data to be read or modified or causes other unintended behavior.
よくある質問
Not sure what something means? Check out our Security Glossary.
エラータ通知の受信を希望しますか? こちらで登録してください。
