CVE-2026-44617

{
  "id": "CVE-2026-44617",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-30T16:17:12.373",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped.                   This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección de filtro LDAP en Apache Zeppelin. LdapRealm utilizó el escape de nombre distinguido RFC 4514 al construir filtros de búsqueda LDAP en lugar del escape de filtro RFC 4515, dejando los caracteres especiales del filtro insuficientemente escapados. Esta es una solución incompleta de CVE-2024-31867. Este problema afecta a las versiones de Apache Zeppelin 0.11.1, 0.11.2 y 0.12.0. Se recomienda a los usuarios actualizar a la versión 0.12.1, que soluciona este problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Zeppelin",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.11.1",
              "lessThan": "0.12.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-31T17:52:58.175055Z",
          "id": "CVE-2026-44617",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-90"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "0.11.1",
              "versionEndExcluding": "0.12.1",
              "matchCriteriaId": "15A2B146-0EAF-4BCF-A253-1F48E9E62ECD"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/apache/zeppelin/pull/5226",
      "source": "[email protected]",
      "tags": [
        "Issue Tracking",
        "Patch"
      ]
    },
    {
      "url": "https://lists.apache.org/thread/s65t6n3s1v4j5b1w7zvv5w73ko69m1zv",
      "source": "[email protected]",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31867",
      "source": "[email protected]",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ]
    }
  ]
}