CVE-2017-8790

Critical

Published: 05/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to LDAP Injection. The POST parameter 'filter' in ldaptest.html can be exploited.

Risk Assessment

An attacker could exploit this vulnerability to manipulate LDAP queries, potentially leading to unauthorized access to data or systems.

Recommendation

It is recommended to update Accellion FTA devices to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter "filter" can be used for LDAP Injection.