Vulnerability Description
Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Philips | Interoperability Solution Xds | >= 2.5, <= 3.11 |
Related Weaknesses (CWE)
References
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-175-01MitigationThird Party AdvisoryUS Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-175-01MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2021-32966?
CVE-2021-32966 is a vulnerability with a CVSS score of 3.7 (LOW). Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and whe...
How severe is CVE-2021-32966?
CVE-2021-32966 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-32966?
Check the references section above for vendor advisories and patch information. Affected products include: Philips Interoperability Solution Xds.