CVE-2017-8028: Spring-LDAP authentication with userSearch and STARTTLS allows authentication with arbitrary password
Description Affected Spring Products and Versions Mitigation Credit This vulnerability was responsibly reported by Tobias Schneider. References https://github.com/spring-projects/spring-ldap/pull/432 https://github.com/spring-projects/spring-ldap/issues/43…