CVE-2026-116200

Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

EUVD-2026-109458

Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

PT-2026-123041

Snipe-IT before 8.6.3 ignores the ldap start tls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

CVE-2026-111347 go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP...

PT-2026-115291

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP...

Design/Logic Flaw

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

CVE-2013-3287: Undefined Security Weakness

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

PT-2013-4280

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions prior to 1.6.1.6 Description The issue allows local users to discover the cleartext LDAP bind password by reading the console when an unspecified level of debug logging is used in LDAP configurations...

CVE-2012-6596: Undefined Security Weakness

Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493...

CVE-2011-2223: Undefined Security Weakness

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2011-3693

Name of the Vulnerable Software and Affected Versions Novell Data Synchronizer versions 1.x through 1.1.2 build 428 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as the Admin LDAP password is sent in cleartext. Recommendations For Novell Da...