{"id":"CVE-2021-33900","aliases":["GHSA-4x25-f45x-grv5"],"url":"https://o3.security/vulnerability/CVE-2021-33900","summary":"Missing encryption in Apache Directory Studio","details":"While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidentiality layer was not applied. This issue affects Apache Directory Studio version 2.0.0.v20210213-M16 and prior versions.","published":"2021-07-26T07:15:07.183Z","modified":"2026-07-08T05:59:53.490911999Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Maven","name":"org.apache.directory.studio:org.apache.directory.studio.parent","fixedVersion":"2.0.0.v20210717-M17"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://lists.apache.org/thread.html/rb1dbcc43a5b406e45d335343a1704f4233de613140a01929d102fdc9%40%3Cusers.directory.apache.org%3E"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:59:53.490911999Z"}}