CVE-2021-38542
Command Injection in Apache James
概要
Command Injection in Apache James
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Maven
org.apache.james:james-server
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1"}]}]
参照URL
- advisory nvd.nist.gov
- web openwall.com
- web openwall.com
- web openwall.com