LDAP injection
LDAP injection is another type of attack on application users and involves placing suspicious code in a victim user's application form fields and gaining unauthorized access. Once the hacker gets access to the application using this approach, they can access the application on their own and compromise user information.
Web applications should thoroughly sanitize the users' input data before using Lightweight Directory Access Protocol (LDAP) statements.
LDAP injection can compromise application credentials, security, financial status, and organization reputation.
LDAP injection can be controlled by periodically changing the credentials, binding the user access to their location and systems, using one-time passwords and random ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access