Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-50356

Improper Certificate Validation in AREAL Topkapi Vision (Server)

Description

SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AREAL SAS Topkapi Vision (Server)

Default version status: unaffected

  • 0 to ≤ 6.2.4718affected

References