Junglewise Threat Intelligence

CVE-2025-27497: OpenDJ Denial of Service (DoS) using alias loop

CVE-2025-27497 · Severity: medium · CVSS 4 · Published 2025-03-05

Technologies: org.openidentityplatform.opendj:opendj-server-legacy (Maven). Vendors: Maven.

Executive brief

OpenDJ Denial of Service (DoS) using alias loop

Affected products

Maven org.openidentityplatform.opendj:opendj-server-legacy

Related threats

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/serv
OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
OpenIdentityPlatform OpenDJ authorization bypass in SASL PLAIN authzid