Apache Software Foundation Directory Studio 2.0.0 Milestone 3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:directory_studio:2.0.0:milestone3:*:*:*:*:*:*

part: a version: 2.0.0 update: milestone3

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductDirectory Studio (1a4fedf2-8bd5-57d4-8337-ef8091677a83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/directory purl2cpe 2026-06-01 10:14:31.624547
pkg:github/apache/directory-studio purl2cpe 2026-06-01 10:14:31.624549

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33900 vulnerable 2026-06-08 05:32:12.639256 StartTLS and SASL confidentiality protection bypass
While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.
Published: 2021-07-26T07:05:10.000Z
Updated: 2024-08-04T00:05:51.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5349 vulnerable 2026-06-08 05:06:49.720892 Details available
The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.
Published: 2016-04-11T21:00:00.000Z
Updated: 2024-08-06T06:41:09.261Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.