In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-05-04T19:06:09
Updated: 2024-08-03T06:10:59.269Z
Reserved: 2022-04-13T00:00:00
Link: CVE-2022-29155
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-05-04T20:15:07.690
Modified: 2024-11-21T06:58:36.057
Link: CVE-2022-29155
Redhat