medium6.5
CVE-2023-50356
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server).
Impact
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Areal-Topkapi | Vision Server | before 6.2.4719 |