CVE-2026-113438
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view, alter or delete information stored in the product with the privilege of the account used to log in.
| Vendor | implem inc. |
| Product | pleasanter |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for implem inc. pleasanter
Be the first to know when new medium vulnerabilities affecting implem inc. pleasanter are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Versions
Implem Inc. / Pleasanter
1.1.0.0 ≤ 1.5.9.0