{"id":"CVE-2026-103878","published":"2026-10-02T10:17:06.570","lastModified":"2026-10-05T19:17:13.993","description":"Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API.\n\n\n\nA StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed.\n\n\n\nThis issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9.\n\n\n\nUsers are recommended to upgrade to version 2.1.9, which fixes the issue.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-345"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/d98f9w01nd3zmkwrr21y0l9kdr9jpty9","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/02/6","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows attackers to intercept sensitive LDAP data transmitted in cleartext before TLS encryption is fully established. This occurs when a StartTLS operation begins after a Search request, leaving data exposed during the transition period.","exploitability":"Exploitation requires an attacker to be positioned between client and server during LDAP communication, with minimal preconditions needed beyond network access.","blast_radius":"The impact could affect multiple LDAP clients and servers that use Apache Directory LDAP API versions 2.1.0 through 2.1.8, potentially exposing authentication credentials and directory data.","remediation":"Upgrade to version 2.1.9 which fixes the cleartext transmission issue in Apache Directory LDAP API.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ldap","cleartext","information-disclosure"],"model":"garnet-coder","analyzedAt":"2026-10-12T09:04:31.058Z"}}