Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
LDAP servers can be misconfigured to accept plaintext usernames and passwords over unencrypted connections. This type of misconfiguration increases the risk of exposing plaintext passwords to attackers that capture traffic through network sniffing.
Kill Chain
Risk Score
60
Install the update released on March 10, 2020 and then add the recommended configurations for LDAP channel binding and LDAP signings (see Microsoft KB4520412)
If you are unable to install the update, make the recommended changes provided in the Microsoft Security Advisory, ADV190023
Disable Simple or SASL-PLAIN Bind authentication on LDAP servers and implement stronger authentication frameworks
