CVE-2021-33900: falha em Apache Directory Studio
StartTLS and SASL confidentiality protection bypass
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Apache Directory Studio+ Monitorar org.apache.directory.studio:org.apache.directory.studio.parent
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.8%
While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.
Produtos afetados
Apache Software Foundation · Apache Directory Studio