title: Improper Certificate Validation in AREAL Topkapi Vision (Server)
description: SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
problem types: CWE-295 Improper Certificate Validation
affected:
{
defaultStatus: unaffected
product: Topkapi Vision (Server)
vendor: AREAL SAS
versions:
lessThanOrEqual: 6.2.4718, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL