{"id":"CVE-2026-44930","state":"PUBLISHED","title":"Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository","description":"An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository. \nUsers are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.","publishedAt":"2026-05-22T12:16:47.230Z","updatedAt":"2026-07-20T12:04:41.035Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"CISA-ADP"},"assigner":"apache","products":["Apache Software Foundation Apache CXF"],"affected":[{"vendor":"Apache Software Foundation","product":"Apache CXF","packageName":"org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap","defaultStatus":"unaffected","versions":[{"version":"4.2.0","status":"affected","lessThan":"4.2.1","versionType":"semver"},{"version":"4.0.0","status":"affected","lessThan":"4.1.6","versionType":"semver"},{"version":"0","status":"affected","lessThan":"3.6.11","versionType":"semver"}],"collectionURL":"https://repo.maven.apache.org/maven2"}],"references":["https://lists.apache.org/thread/c1zqxppo1m5z3kbdhjn5p991zk09ynkh","http://www.openwall.com/lists/oss-security/2026/05/22/9","https://access.redhat.com/security/cve/CVE-2026-44930","https://bugzilla.redhat.com/show_bug.cgi?id=2480728","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44930.json","https://access.redhat.com/errata/RHSA-2026:37390"],"weaknesses":["CWE-90"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/44xxx/CVE-2026-44930.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-44930","state":"PUBLISHED","datePublished":"2026-05-22T12:16:47.230Z","dateUpdated":"2026-07-20T12:04:41.035Z","assignerShortName":"apache","assignerOrgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateReserved":"2026-05-08T10:39:48.240Z"},"containers":{"cna":{"title":"Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository","descriptions":[{"lang":"en","value":"An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository. \nUsers are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue."}],"affected":[{"vendor":"Apache Software Foundation","product":"Apache CXF","packageName":"org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap","defaultStatus":"unaffected","versions":[{"version":"4.2.0","status":"affected","lessThan":"4.2.1","versionType":"semver"},{"version":"4.0.0","status":"affected","lessThan":"4.1.6","versionType":"semver"},{"version":"0","status":"affected","lessThan":"3.6.11","versionType":"semver"}],"collectionURL":"https://repo.maven.apache.org/maven2"}],"references":[{"url":"https://lists.apache.org/thread/c1zqxppo1m5z3kbdhjn5p991zk09ynkh","tags":["vendor-advisory"]}],"metrics":[{"other":{"content":{"text":"important"},"type":"Textual description of severity"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-90","description":"CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"apache","orgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateUpdated":"2026-05-22T12:16:47.230Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-05-22T17:24:05.903573Z","id":"CVE-2026-44930","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-22T17:24:09.053Z"}},{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/05/22/9"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2026-05-22T21:26:22.941Z"}},{"title":"apache-cxf: org.apache.cxf.services.xkms/cxf-services-xkms-x509-repo-ldap: Apache CXF: Information Disclosure via LDAP Injection","descriptions":[{"lang":"en","value":"A flaw was found in Apache CXF. A remote attacker could exploit an LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server. This vulnerability allows the attacker to retrieve arbitrary certificates from the repository, leading to information disclosure."}],"affected":[{"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","packageName":"cxf-services-xkms-x509","defaultStatus":"affected","versions":[{"version":"repo-ldap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:apache_camel_spring_boot:4.18"]},{"vendor":"Red Hat","product":"Red Hat Fuse 7","packageName":"cxf-services-xkms-x509-repo-ldap","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_fuse:7"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","packageName":"cxf-services-xkms-x509-repo-ldap","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jbosseapxp"]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-44930","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480728","name":"RHBZ#2480728","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44930.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:37390","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-90","description":"Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat-SADP","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","dateUpdated":"2026-07-20T12:04:41.035Z"},"datePublic":"2026-05-22T12:16:47.230Z","solutions":[{"lang":"en","value":"RHSA-2026:37390: Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16"}],"timeline":[{"lang":"en","time":"2026-05-22T13:00:51.621Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-05-22T12:16:47.230Z","value":"Made public."}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}]}}}