Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2022-05-25T13:29:03

Updated: 2024-08-03T23:33:56.248Z

Reserved: 2021-05-13T00:00:00

Link: CVE-2021-32966

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-05-25T14:15:08.380

Modified: 2024-11-21T06:08:01.373

Link: CVE-2021-32966

cve-icon Redhat

No data.