CVE-2023-50356: Areal-Topkapi Vision Server
Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.
SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.
Affected products
- Areal-Topkapi Vision Server: before 6.2.4719 (fixed in 6.2.4719)
Published 2024-01-31. Last modified 2026-06-17.