René's URL Explorer Experiment


Title: Java: Insecure LDAP authentication by luchua-bc · Pull Request #4854 · github/codeql · GitHub

Open Graph Title: Java: Insecure LDAP authentication by luchua-bc · Pull Request #4854 · github/codeql

X Title: Java: Insecure LDAP authentication by luchua-bc · Pull Request #4854 · github/codeql

Description: When using the Java LDAP API to perform LDAPv3-style extended operations and controls like user profile retrieval, a context with connection properties including user credentials is started. Transmission of LDAP credentials in cleartext allows remote attackers to obtain sensitive information by sniffing the network. This query detects transmission of cleartext credentials in LDAP authentication, which meets the following two criteria: Use the protocol "ldap" instead of "ldaps" Use "simple" authentication instead of SASL authentication using encrypted/hashed credentials Please consider to merge the PR. Thanks.

Open Graph Description: When using the Java LDAP API to perform LDAPv3-style extended operations and controls like user profile retrieval, a context with connection properties including user credentials is started. Transm...

X Description: When using the Java LDAP API to perform LDAPv3-style extended operations and controls like user profile retrieval, a context with connection properties including user credentials is started. Transm...

Opengraph URL: https://github.com/github/codeql/pull/4854

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:e4cc11de-022e-3d12-971e-8c662d1956a3
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idB69C:2C7266:2DD16B:3E2966:6A4C7C3C
html-safe-nonce64cedce190fb70e91e35d87f35fae8d2c5728fc3ef59665e86449558b585510c
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCNjlDOjJDNzI2NjoyREQxNkI6M0UyOTY2OjZBNEM3QzNDIiwidmlzaXRvcl9pZCI6IjE4MjE0MDYxNTkyNTgyODcxNjQiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmaca3d20c781770709fbbb762e290831be5aab1544d245ff8a685a9cb572e8b9b15
hovercard-subject-tagpull_request:543155411
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/4854/files
twitter:imagehttps://avatars.githubusercontent.com/u/37377780?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/37377780?s=400&v=4
og:image:altWhen using the Java LDAP API to perform LDAPv3-style extended operations and controls like user profile retrieval, a context with connection properties including user credentials is started. Transm...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasecd470457e909b9d062f8002cf438ba870e6acff6
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/4854/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4854%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4854%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/4854/files
Reloadhttps://github.com/github/codeql/pull/4854/files
Reloadhttps://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
aschackmullhttps://github.com/aschackmull
github:mainhttps://github.com/github/codeql/tree/main
luchua-bc:java/insecure-ldap-authhttps://github.com/luchua-bc/ql/tree/java/insecure-ldap-auth
Conversation 69 https://github.com/github/codeql/pull/4854
Findings https://github.com/github/codeql/pull/4854/findings
Commits 9 https://github.com/github/codeql/pull/4854/commits
Checks 0 https://github.com/github/codeql/pull/4854/checks
Files changed https://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
Java: Insecure LDAP authentication https://github.com/github/codeql/pull/4854/files#top
Show all changes 9 commits https://github.com/github/codeql/pull/4854/files
4ec78d0 Insecure LDAP authentication luchua-bc Dec 21, 2020 https://github.com/github/codeql/pull/4854/commits/4ec78d04f8cc8f869af959556e9537bf651fd7e5
c069a5b Factor private host regex into the networking library and enhance the… luchua-bc Jan 4, 2021 https://github.com/github/codeql/pull/4854/commits/c069a5b4c654e06ea669e7cdef0793d5179c9944
babe744 Add SECURITY_PROTOCOL check luchua-bc Jan 13, 2021 https://github.com/github/codeql/pull/4854/commits/babe744a3011a4f7e2216ff5bd95bed241dd4984
e5a703e Revamp the query luchua-bc Jan 15, 2021 https://github.com/github/codeql/pull/4854/commits/e5a703e49c3fe53aeda8e6ecb9d3766df7683124
32c5462 Drop fieldName from the function for runtime evaluation luchua-bc Jan 15, 2021 https://github.com/github/codeql/pull/4854/commits/32c54628f8afc010e4000368d9abdecea6b50f7f
6a93099 Simplify the query and update qldoc luchua-bc Jan 28, 2021 https://github.com/github/codeql/pull/4854/commits/6a93099b645e32e7598999ddbcf0303f65e657fa
3151aef Enhance the query luchua-bc Feb 2, 2021 https://github.com/github/codeql/pull/4854/commits/3151aeff48c41c067e1daea026edbe3d759b702b
2ace10f Use PostUpdateNode for wrapper method calls luchua-bc Feb 3, 2021 https://github.com/github/codeql/pull/4854/commits/2ace10fcdfb54ee3fe7f93a5cdddfd99aedfa534
724c3e0 Update help file luchua-bc Feb 3, 2021 https://github.com/github/codeql/pull/4854/commits/724c3e00e02be120f2a48630c2bc6ab6dfa9fd32
Clear filters https://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
InsecureBasicAuth.ql https://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
InsecureLdapAuth.java https://github.com/github/codeql/pull/4854/files#diff-97c565c5974214a10a18fb7bc3d15d8266377b5090ed9e6590cd15a2e2706232
InsecureLdapAuth.qhelp https://github.com/github/codeql/pull/4854/files#diff-13346245b93870c3931c466791f0e091ee50139b08467fc64a4b2e4c5be7305d
InsecureLdapAuth.ql https://github.com/github/codeql/pull/4854/files#diff-1f4e70ab2f231b8135340d3d8fcec9efc769f27a3433773363ab781d1e9572d1
Networking.qll https://github.com/github/codeql/pull/4854/files#diff-c47cf7dab8a5df2bd8aa93a637e46de14bc80325e20ac3161220aaf53956bd78
InsecureLdapAuth.expected https://github.com/github/codeql/pull/4854/files#diff-2b6434369de25fbe452d83a79e8da973ef4dc86e1eafedd3ee6f5af640e27235
InsecureLdapAuth.java https://github.com/github/codeql/pull/4854/files#diff-1a42a73a330dd7ce3a9ad886917feeb8091824114ccfed46217adce9041dcb29
InsecureLdapAuth.qlref https://github.com/github/codeql/pull/4854/files#diff-c3b19fe481d92b8e37f4e9ee1a8e9600288344a288b6945757e29fb535dafb85
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/experimental/Security/CWE/CWE-522/InsecureBasicAuth.qlhttps://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
View file https://github.com/luchua-bc/ql/blob/724c3e00e02be120f2a48630c2bc6ab6dfa9fd32/java/ql/src/experimental/Security/CWE/CWE-522/InsecureBasicAuth.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4854/{{ revealButtonHref }}
https://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
https://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
https://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
https://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
https://github.com/github/codeql/pull/4854/files#diff-3abc9496ac238183ddfcf6b877b290a6ea483c0b2173071f097797c7f1fc4825
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.javahttps://github.com/github/codeql/pull/4854/files#diff-97c565c5974214a10a18fb7bc3d15d8266377b5090ed9e6590cd15a2e2706232
View file https://github.com/luchua-bc/ql/blob/724c3e00e02be120f2a48630c2bc6ab6dfa9fd32/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.java
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4854/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.qhelphttps://github.com/github/codeql/pull/4854/files#diff-13346245b93870c3931c466791f0e091ee50139b08467fc64a4b2e4c5be7305d
View file https://github.com/luchua-bc/ql/blob/724c3e00e02be120f2a48630c2bc6ab6dfa9fd32/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.qhelp
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4854/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.qlhttps://github.com/github/codeql/pull/4854/files#diff-1f4e70ab2f231b8135340d3d8fcec9efc769f27a3433773363ab781d1e9572d1
View file https://github.com/luchua-bc/ql/blob/724c3e00e02be120f2a48630c2bc6ab6dfa9fd32/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4854/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/semmle/code/java/frameworks/Networking.qllhttps://github.com/github/codeql/pull/4854/files#diff-c47cf7dab8a5df2bd8aa93a637e46de14bc80325e20ac3161220aaf53956bd78
View file https://github.com/luchua-bc/ql/blob/724c3e00e02be120f2a48630c2bc6ab6dfa9fd32/java/ql/src/semmle/code/java/frameworks/Networking.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4854/{{ revealButtonHref }}
https://github.com/github/codeql/pull/4854/files#diff-c47cf7dab8a5df2bd8aa93a637e46de14bc80325e20ac3161220aaf53956bd78
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
Please reload this pagehttps://github.com/github/codeql/pull/4854/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.