This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Periodic Table of Vulnerabilities - LDAP Injection"
From OWASP
James Landis (talk | contribs) (Created page with "Return to Periodic Table Working View == LDAP Injection == === Root Cause Summary === LDAP quer...") |
(No difference)
|
Latest revision as of 21:57, 22 July 2013
Return to Periodic Table Working View
LDAP Injection
Root Cause Summary
LDAP queries are formed using dynamic data without performing proper encoding, allowing the data to change the functional meaning of the query.
Browser / Standards Solution
None
Perimeter Solution
None
Generic Framework Solution
The framework should provide safe libraries for interacting with LDAP servers which automatically encode unsafe data. The framework should not allow application code to directly interact with LDAP servers.
Custom Framework Solution
None
Custom Code Solution
None
Discussion / Controversy
None
