CyberRota Analysis
AI-GeneratedA vulnerability exists in UAA versions prior to v78.13.0 and Cf-deployment versions prior to v56.2.0, allowing network attackers to impersonate the LDAP directory using any trusted CA certificate. This exploitation can lead to the harvesting of LDAP bind passwords and end-user passwords during simple-bind authentication, as well as the ability to manipulate group memberships to gain administrative access. Organizations utilizing LDAP over StartTLS for user authentication should prioritize patching to mitigate this critical risk.
Original NVD Description
A network attacker positioned between UAA and its LDAP directory can impersonate the directory using any certificate from any trusted CA, then harvest the LDAP bind password and every end-user password sent during simple-bind authentication, and return forged group memberships that grant themselves admin scopes. This affects every deployment that authenticates users against LDAP over StartTLS. Affected versions: UAA versions prior to v78.13.0; Cf-deployment versions prior to v56.2.0.