CVE-2023-50356 — Improper Certificate Validation in AREAL Topkapi Vision (Server)

CVE-2023-50356

Improper Certificate Validation in AREAL Topkapi Vision (Server) PUBLISHED

Description (CNA)

SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.

Affected (CNA)

Vendor / product	Versions
AREAL SAS / Topkapi Vision (Server)	affected 0 through 6.2.4718

CWE

CWE-295

References

https://www.areal-topkapi.com/en/services/security-bulletins

ADP enrichment

CVE

No English description supplied.

https://www.areal-topkapi.com/en/services/security-bulletins

CISA-ADP

No English description supplied.

No references supplied.