점검 대응높음KEV 미등록
CVE-2026-35563
Apache Software Foundation Apache Directory LDAP API, directory ldap api 취약점
It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid certificate issued for an entirely unrelated host to be improperly accepted. This oversight leaves the connection highly vulnerable to server impersonation and complete connection compromise. The root cause of this vulnerability lies in the incomplete TLS server identity verification within the LDAP client...
- 대응 우선순위
- 점검
- CVSS
- 8.8
- EPSS
- 0.18% 백분위 7.95% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.01