Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-116200

Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

grokability snipe-it

Default version status: unaffected

  • 0 to < 8.6.3affected
  • 8.6.3unaffected

References