Lucene search
HistoryJan 31, 2024 - 11:15 a.m.
CVE-2023-50356
cve-2023-50356
ldap servers
man-in-the-middle attack
certificate validation
remote attacker
sensitive information
login prevention
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS
0.001
Percentile
34.0%
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
Affected configurations
Node
areal-topkapivision_serverRange<6.2.4719
| Vendor | Product | Version | CPE |
|---|---|---|---|
| areal-topkapi | vision_server | * | cpe:2.3:a:areal-topkapi:vision_server:*:*:*:*:*:*:*:* |
Related
prion
prion
Input validation
2024-01-31 11:15:00
cvelist
cvelist
cve
cve
CVE-2023-50356
2024-01-31 11:15:07
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS
0.001
Percentile
34.0%
Related for NVD:CVE-2023-50356