Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-33900

Опубликовано: 26 июл. 2021
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:directory_studio:*:*:*:*:*:*:*:*
Версия до 1.5.3 (включая)
cpe:2.3:a:apache:directory_studio:2.0.0:milestone1:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone10:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone11:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone12:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone13:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone14:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone15:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone16:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone2:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone3:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone4:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone5:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone6:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone7:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone8:*:*:*:*:*:*
cpe:2.3:a:apache:directory_studio:2.0.0:milestone9:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00141
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-311
CWE-319

Связанные уязвимости

ubuntu логотип

CVE-2021-33900

CVSS3: 7.5
ubuntu
больше 4 лет назад

While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.

debian логотип

CVE-2021-33900

CVSS3: 7.5
debian
больше 4 лет назад

While investigating DIRSTUDIO-1219 it was noticed that configured Star ...

github логотип

GHSA-4x25-f45x-grv5

CVSS3: 7.5
github
больше 4 лет назад

Missing encryption in Apache Directory Studio

fstec логотип

BDU:2021-04477

CVSS3: 7.5
fstec
больше 4 лет назад

Уязвимость платформы для работы с каталогами Apache Directory Studio, связанная с отсутствием защиты служебных данных, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 35%
0.00141
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-311
CWE-319