Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2021-32966

Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Philips Interoperability Solution XDS

  • 2.5 through 3.11affected
  • 2018-1 through 2021-1affected

References