IBM Content Navigator versions 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 contain an LDAP injection vulnerability. This flaw allows a remote authenticated attacker to send specially crafted requests that could enable enumeration of LDAP directory information. The vulnerability has a medium severity rating with a CVSS score of 4.3.