Authentication flaw

2021-07-2607:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.8%

JSON

While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.

CPENameOperatorVersion
directory_studioeq2.0.0 milestone4
directory_studioeq2.0.0 milestone1
directory_studioeq2.0.0 milestone3
directory_studioeq2.0.0 milestone2
directory_studioeq2.0.0 milestone9
directory_studioeq2.0.0 milestone8
directory_studioeq2.0.0 milestone5
directory_studioeq2.0.0 milestone7
directory_studioeq2.0.0 milestone6
directory_studioeq2.0.0 milestone10

Name	Operator	Version
directory_studio	eq	2.0.0 milestone4
directory_studio	eq	2.0.0 milestone1
directory_studio	eq	2.0.0 milestone3
directory_studio	eq	2.0.0 milestone2
directory_studio	eq	2.0.0 milestone9
directory_studio	eq	2.0.0 milestone8
directory_studio	eq	2.0.0 milestone5
directory_studio	eq	2.0.0 milestone7
directory_studio	eq	2.0.0 milestone6
directory_studio	eq	2.0.0 milestone10