Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.
References
Link | Resource |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsma-21-175-01 | Mitigation Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2022-05-25T13:29:03
Updated: 2022-05-25T13:29:03
Reserved: 2021-05-13T00:00:00
Link: CVE-2021-32966
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-05-25T14:15:08.380
Modified: 2022-06-08T14:29:06.183
Link: CVE-2021-32966
JSON object: View
Redhat Information
No data.
CWE