← Back

Vt Ldap

vt-ldap

Vendor: Ldaptive • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3607
1Ldaptive
2Ldaptive
Vt Ldap
Nov 21, 2024
Jan 8, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-mid...Show more
DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.Show less