SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
CPE | Name | Operator | Version |
---|---|---|---|
vision_server | lt | 6.2.4719 |