CVE-2021-33900
High
Description
While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Apache Directory Studio
PublishedJul 26, 2021
First seenJul 26, 2021
Weakness typeCWE-311CWE-311
How to fix
Update
- org.apache.directory.studio:org.apache.directory.studio.parent2.0.0.v20210717-M17 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache directory_studio | v ≤ 1.5.3, 2.0.0 | — |
| org.apache.directory.studio:org.apache.directory.studio.parentMaven | v < 2.0.0.v20210717-M17 | 2.0.0.v20210717-M17 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.