Vulnerability · Published Jan 31, 2024 · Assigned by CERTVDE
CVE-2023-50356Improper Certificate Validation in AREAL Topkapi Vision (Server)
Medium 6.5
In plain English
A medium-severity improper certificate validation in Topkapi Vision (Server) from AREAL SAS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 78.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AREAL SAS | Topkapi Vision (Server) | 0 – through 6.2.4718 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L