LDAP injection vulnerability in LDAPAuthenticationSchemeImpl

An LDAP injection vulnerability has been identified in LDAPAuthenticationSchemeImpl.getDNFromUID(). An exploit has not been provided, but there is a possibility that an intruder could bypass authentication checks in Derby-powered applications which rely on external LDAP servers.

For more information on LDAP injection, see https://www.synopsys.com/glossary/what-is-ldap-injection.html