Search

Find a vulnerability

Search criteria

    6 vulnerabilities found for Auth0 AD/LDAP Connector by Auth0

    CVE-2026-85983 (GCVE-0-2026-85983)

    Vulnerability from nvd – Published: 2026-09-08 20:18 – Updated: 2026-09-10 14:43
    VLAI
    Title
    Local Privilege Escalation in Auth0 AD/LDAP Connector
    Summary
    The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:43 UTC
    CWE
    • CWE-94 - Improper Control of Generation of Code
    Impacted products
    Vendor Product Version
    Auth0 Auth0 AD/LDAP Connector Affected: 0 , ≤ 6.5.0 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85983",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:43:45.813987Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:43:59.925Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Auth0 AD/LDAP Connector",
              "vendor": "Auth0",
              "versions": [
                {
                  "lessThanOrEqual": "6.5.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector\u0027s configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-94",
                  "description": "Improper Control of Generation of Code",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T20:18:09.381Z",
            "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
            "shortName": "Okta"
          },
          "references": [
            {
              "url": "https://trust.okta.com/security-advisories/local-privilege-escalation-in-auth0-ad-ldap-connector-cve-2026-85983"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade the auth0/ad-ldap-connector to version 7.00 or greater."
            }
          ],
          "title": "Local Privilege Escalation in Auth0 AD/LDAP Connector"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "assignerShortName": "Okta",
        "cveId": "CVE-2026-85983",
        "datePublished": "2026-09-08T20:18:09.381Z",
        "dateReserved": "2026-09-04T19:04:28.553Z",
        "dateUpdated": "2026-09-10T14:43:59.925Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85982 (GCVE-0-2026-85982)

    Vulnerability from nvd – Published: 2026-09-08 20:17 – Updated: 2026-09-10 14:43
    VLAI
    Title
    Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector
    Summary
    The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator's browser when they view the affected search results or update logs.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:43 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Impacted products
    Vendor Product Version
    Auth0 Auth0 AD/LDAP Connector Affected: 0 , ≤ 6.5.0 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85982",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:43:01.622324Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:43:17.196Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Auth0 AD/LDAP Connector",
              "vendor": "Auth0",
              "versions": [
                {
                  "lessThanOrEqual": "6.5.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator\u0027s browser when they view the affected search results or update logs."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-79",
                  "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T20:17:40.063Z",
            "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
            "shortName": "Okta"
          },
          "references": [
            {
              "url": "https://trust.okta.com/security-advisories/stored-cross-site-scripting-xss-in-auth0-ad-ldap-connector-cve-2026-85982"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade the Auth0 AD/LDAP Connector to version 7.0.0 or greater."
            }
          ],
          "title": "Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "assignerShortName": "Okta",
        "cveId": "CVE-2026-85982",
        "datePublished": "2026-09-08T20:17:40.063Z",
        "dateReserved": "2026-09-04T19:03:24.108Z",
        "dateUpdated": "2026-09-10T14:43:17.196Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85981 (GCVE-0-2026-85981)

    Vulnerability from nvd – Published: 2026-09-08 20:17 – Updated: 2026-09-10 14:42
    VLAI
    Title
    Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector
    Summary
    The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:42 UTC
    CWE
    • CWE-306 - Missing Authentication for Critical Function
    Impacted products
    Vendor Product Version
    Auth0 Auth0 AD/LDAP Connector Affected: 0 , ≤ 6.5.0 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85981",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:42:14.078158Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:42:25.037Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Auth0 AD/LDAP Connector",
              "vendor": "Auth0",
              "versions": [
                {
                  "lessThanOrEqual": "6.5.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel\u0027s management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-306",
                  "description": "Missing Authentication for Critical Function",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T20:17:06.765Z",
            "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
            "shortName": "Okta"
          },
          "references": [
            {
              "url": "https://trust.okta.com/security-advisories/unauthenticated-localhost-admin-panel-in-auth0-ad-ldap-connector-cve-2026-85981"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade the Auth0 AD/LDAP Connector to version 7.0.0 or greater."
            }
          ],
          "title": "Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "assignerShortName": "Okta",
        "cveId": "CVE-2026-85981",
        "datePublished": "2026-09-08T20:17:06.765Z",
        "dateReserved": "2026-09-04T19:01:50.724Z",
        "dateUpdated": "2026-09-10T14:42:25.037Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85983 (GCVE-0-2026-85983)

    Vulnerability from cvelistv5 – Published: 2026-09-08 20:18 – Updated: 2026-09-10 14:43
    VLAI
    Title
    Local Privilege Escalation in Auth0 AD/LDAP Connector
    Summary
    The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:43 UTC
    CWE
    • CWE-94 - Improper Control of Generation of Code
    Impacted products
    Vendor Product Version
    Auth0 Auth0 AD/LDAP Connector Affected: 0 , ≤ 6.5.0 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85983",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:43:45.813987Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:43:59.925Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Auth0 AD/LDAP Connector",
              "vendor": "Auth0",
              "versions": [
                {
                  "lessThanOrEqual": "6.5.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector\u0027s configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-94",
                  "description": "Improper Control of Generation of Code",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T20:18:09.381Z",
            "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
            "shortName": "Okta"
          },
          "references": [
            {
              "url": "https://trust.okta.com/security-advisories/local-privilege-escalation-in-auth0-ad-ldap-connector-cve-2026-85983"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade the auth0/ad-ldap-connector to version 7.00 or greater."
            }
          ],
          "title": "Local Privilege Escalation in Auth0 AD/LDAP Connector"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "assignerShortName": "Okta",
        "cveId": "CVE-2026-85983",
        "datePublished": "2026-09-08T20:18:09.381Z",
        "dateReserved": "2026-09-04T19:04:28.553Z",
        "dateUpdated": "2026-09-10T14:43:59.925Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85982 (GCVE-0-2026-85982)

    Vulnerability from cvelistv5 – Published: 2026-09-08 20:17 – Updated: 2026-09-10 14:43
    VLAI
    Title
    Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector
    Summary
    The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator's browser when they view the affected search results or update logs.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:43 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Impacted products
    Vendor Product Version
    Auth0 Auth0 AD/LDAP Connector Affected: 0 , ≤ 6.5.0 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85982",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:43:01.622324Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:43:17.196Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Auth0 AD/LDAP Connector",
              "vendor": "Auth0",
              "versions": [
                {
                  "lessThanOrEqual": "6.5.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator\u0027s browser when they view the affected search results or update logs."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-79",
                  "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T20:17:40.063Z",
            "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
            "shortName": "Okta"
          },
          "references": [
            {
              "url": "https://trust.okta.com/security-advisories/stored-cross-site-scripting-xss-in-auth0-ad-ldap-connector-cve-2026-85982"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade the Auth0 AD/LDAP Connector to version 7.0.0 or greater."
            }
          ],
          "title": "Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "assignerShortName": "Okta",
        "cveId": "CVE-2026-85982",
        "datePublished": "2026-09-08T20:17:40.063Z",
        "dateReserved": "2026-09-04T19:03:24.108Z",
        "dateUpdated": "2026-09-10T14:43:17.196Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85981 (GCVE-0-2026-85981)

    Vulnerability from cvelistv5 – Published: 2026-09-08 20:17 – Updated: 2026-09-10 14:42
    VLAI
    Title
    Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector
    Summary
    The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:42 UTC
    CWE
    • CWE-306 - Missing Authentication for Critical Function
    Impacted products
    Vendor Product Version
    Auth0 Auth0 AD/LDAP Connector Affected: 0 , ≤ 6.5.0 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85981",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:42:14.078158Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:42:25.037Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Auth0 AD/LDAP Connector",
              "vendor": "Auth0",
              "versions": [
                {
                  "lessThanOrEqual": "6.5.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel\u0027s management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-306",
                  "description": "Missing Authentication for Critical Function",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T20:17:06.765Z",
            "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
            "shortName": "Okta"
          },
          "references": [
            {
              "url": "https://trust.okta.com/security-advisories/unauthenticated-localhost-admin-panel-in-auth0-ad-ldap-connector-cve-2026-85981"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade the Auth0 AD/LDAP Connector to version 7.0.0 or greater."
            }
          ],
          "title": "Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "assignerShortName": "Okta",
        "cveId": "CVE-2026-85981",
        "datePublished": "2026-09-08T20:17:06.765Z",
        "dateReserved": "2026-09-04T19:01:50.724Z",
        "dateUpdated": "2026-09-10T14:42:25.037Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }