CVE-2026-73644

creationtimestamp| type| source ---|---|--- 2026-08-13 18:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msybmbk7el2u...

CVE-2026-73644

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extensions/PlainSASLMechanismHandler.java checked the PROXIEDAUTH privilege but did not evaluate the mayProxy proxy ACI scope when an...