What’s Vulnerable › Vulnerabilities

CVE-2023-50356: Improper Certificate Validation in AREAL Topkapi Vision (Server)

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-31 · updated 2026-06-17
• Weakness: CWE-295

Description

SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login.

Affected products

• AREAL SAS Topkapi Vision (Server): before 6.2.4719 — fixed in 6.2.4719

How to fix

Upgrade to a fixed version: AREAL SAS Topkapi Vision (Server) 6.2.4719. Check the vendor advisory for mitigations.

References

• https://www.areal-topkapi.com/en/services/security-bulletins
• https://www.areal-topkapi.com/en/services/security-bulletins

Get alerted when CVE-2023-50356 or the next vulnerability affects your stack