CVE-2016-6501

Critical

Published: 09/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

JFrog Artifactory before version 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, known as LDAP entry poisoning.

Risk Assessment

An attacker can exploit this vulnerability to remotely execute code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade JFrog Artifactory to version 4.11 or later to mitigate this vulnerability.

Original NVD description (English source)

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.