CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be (re)entered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the vendor originally reported this as a security issue but then reconsidered because of the requirement for Admin access in order to change the configuration.

• CWE-319

• https://www.ysoft.com/en/legal/ldaps-encryption-downgrade-attack-vulnerabilityVendor Advisory
• https://ysoft.comProduct
• https://www.ysoft.com/en/legal/ldaps-encryption-downgrade-attack-vulnerabilityVendor Advisory
• https://ysoft.comProduct

Published

Jul 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35825Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-35826An issue was discovered in the Linux kernel before 6.3.2. A …7
• CVE-2023-35827An issue was discovered in the Linux kernel through 6.3.8. A…7
• CVE-2023-35828An issue was discovered in the Linux kernel before 6.3.2. A …7
• CVE-2023-35829An issue was discovered in the Linux kernel before 6.3.2. A …7
• CVE-2023-35830STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module…9.8
• CVE-2023-35835An issue was discovered in SolaX Pocket WiFi 3 through 3.001…9.8
• CVE-2023-35836An issue was discovered in SolaX Pocket WiFi 3 through 3.001…6.5
• CVE-2023-35837An issue was discovered in SolaX Pocket WiFi 3 through 3.001…9.8
• CVE-2023-35838The WireGuard client 0.5.3 on Windows insecurely configures …5.7
• CVE-2023-35839A bypass in the component sofa-hessian of Solon before v2.3.…9.8
• CVE-2023-3584Mattermost fails to properly check the authorization of POST…3.1