Missing encryption in Apache Directory Studio

2021-08-0920:40:53

Google

osv.dev

0.001 Low

EPSS

Percentile

21.8%

JSON

While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.

CPENameOperatorVersion
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20150606-M9
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20200411-M15
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20210213-M16
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20151221-M10
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20180908-M14
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20161101-M12
org.apache.directory.studio:org.apache.directory.studio.parenteq2.0.0.v20170904-M13

Name	Operator	Version
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20150606-M9
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20200411-M15
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20210213-M16
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20151221-M10
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20180908-M14
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20161101-M12
org.apache.directory.studio:org.apache.directory.studio.parent	eq	2.0.0.v20170904-M13