01 Record

CVE-2026-73644

OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant

CriticalPUBLISHEDCNA: GitHub_M

Base score9.6 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

02 Description

OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant

Published: 2026-08-13 17:52Z1 DAY AGO
Last updated: 2026-08-13 17:52Z1 DAY AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Critical (CVSS 9.6)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Weaknesses: CWE-285 CWE-639
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 1d9760ac84471d7bce979359930e80dc7a74c0093a5069ac7e7ec0f23038bfcb

VendorProductVersionsPlatforms

OpenIdentityPlatformOpenDJ< 5.1.2—