Description
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AREAL SAS | Topkapi Vision (Server) | ≤ 6.2.4718 | — |