Read the docs

Ldaptive

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ldaptive records in CISA KEV

No Ldaptive vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ldaptive 1 record LOW Vt-ldap 1 record LOW

Records

1 record

TI-2014-02928 CVE-2014-3607 · GHSA-273v-g3x4-r3rc

DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the…

Priority LOW 28

DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-mid…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00867 Published 2018-01-08 Fixed in 3.3.8, 2.4.2 CWE-295
Open these records in search →