openldap is uses weak cipher suite by default. The default cipher suite is always used in libraries/libldap/tls_m.c in OpenLDAP, when using the Mozilla NSS backend, even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.
bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309
rhn.redhat.com/errata/RHSA-2012-1151.html
seclists.org/fulldisclosure/2019/Dec/26
security.gentoo.org/glsa/glsa-201406-36.xml
www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=2c2bb2e
www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=2c2bb2e
www.openldap.org/its/index.cgi?findid=7285
www.openwall.com/lists/oss-security/2012/06/05/4
www.openwall.com/lists/oss-security/2012/06/06/1
www.openwall.com/lists/oss-security/2012/06/06/2
www.securityfocus.com/bid/53823
www.securitytracker.com/id?1027127
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=825875
bugzilla.redhat.com/show_bug.cgi?id=844428
exchange.xforce.ibmcloud.com/vulnerabilities/76099
rhn.redhat.com/errata/RHSA-2012-1151.html
seclists.org/bugtraq/2019/Dec/23
support.apple.com/kb/HT210788