{"id":"CVE-2021-33900","details":"While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.","aliases":["GHSA-4x25-f45x-grv5"],"modified":"2026-07-08T05:59:53.490911999Z","published":"2021-07-26T07:15:07.183Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:apache:directory_studio:2.0.0:milestone10:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone11:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone12:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone13:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone14:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone15:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone16:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone1:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone2:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone3:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone4:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone5:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone6:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone7:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone8:*:*:*:*:*:*","cpe:2.3:a:apache:directory_studio:2.0.0:milestone9:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0.0-milestone1"},{"last_affected":"2.0.0-milestone1"},{"introduced":"2.0.0-milestone10"},{"last_affected":"2.0.0-milestone10"},{"introduced":"2.0.0-milestone11"},{"last_affected":"2.0.0-milestone11"},{"introduced":"2.0.0-milestone12"},{"last_affected":"2.0.0-milestone12"},{"introduced":"2.0.0-milestone13"},{"last_affected":"2.0.0-milestone13"},{"introduced":"2.0.0-milestone14"},{"last_affected":"2.0.0-milestone14"},{"introduced":"2.0.0-milestone15"},{"last_affected":"2.0.0-milestone15"},{"introduced":"2.0.0-milestone16"},{"last_affected":"2.0.0-milestone16"},{"introduced":"2.0.0-milestone2"},{"last_affected":"2.0.0-milestone2"},{"introduced":"2.0.0-milestone3"},{"last_affected":"2.0.0-milestone3"},{"introduced":"2.0.0-milestone4"},{"last_affected":"2.0.0-milestone4"},{"introduced":"2.0.0-milestone5"},{"last_affected":"2.0.0-milestone5"},{"introduced":"2.0.0-milestone6"},{"last_affected":"2.0.0-milestone6"},{"introduced":"2.0.0-milestone7"},{"last_affected":"2.0.0-milestone7"},{"introduced":"2.0.0-milestone8"},{"last_affected":"2.0.0-milestone8"},{"introduced":"2.0.0-milestone9"},{"last_affected":"2.0.0-milestone9"}],"source":"CPE_STRING","vendor_product":"apache:directory_studio"}]},"references":[{"type":"ADVISORY","url":"https://lists.apache.org/thread.html/rb1dbcc43a5b406e45d335343a1704f4233de613140a01929d102fdc9%40%3Cusers.directory.apache.org%3E"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/directory-studio","events":[{"introduced":"0"},{"last_affected":"f8bd39ad32780a5ed629debddba1f99d84da9ef0"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:apache:directory_studio:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.5.3"}]}}],"versions":["1.5.3.v20100330"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33900.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}