{"id":"CVE-2026-113438","kind":"vulnerability","aliases":["CVE-2026-113438"],"related":[],"title":"Pleasanter: LDAP login accepts a valid Login ID without password","description":"Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations.  If exploited, an attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view, alter or delete information stored in the product with the privilege of the account used to log in.","summary":"Pleasanter fails to verify passwords during LDAP authentication under certain configurations, so a request with only a valid Login ID can be accepted. An attacker can then view, change or delete data with the privileges of that account.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ldap","package","pleasanter","self-hosted"],"not_affected_if":["ldap-disabled"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-26T09:16:34+00:00","first_seen_at":"2026-10-26T09:29:15+00:00","triaged_at":"2026-10-26T09:30:51+00:00","updated_at":"2026-10-26T09:30:51+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-26T09:30:51Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Pleasanter: LDAP login accepts a valid Login ID without password","impact":"medium","summary":"Pleasanter fails to verify passwords during LDAP authentication under certain configurations, so a request with only a valid Login ID can be accepted. An attacker can then view, change or delete data with the privileges of that account.","category":"package","nicknames":[],"who_cares":["pleasanter","ldap","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker logs in as a valid user without password and alters data","analyst_note":"Find affected and fixed Pleasanter versions and the exact LDAP configuration that triggers the bypass, via the NVD entry and the vendor advisory.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["ldap-disabled"],"who_is_affected":"Teams running Pleasanter with LDAP authentication enabled under the configuration the advisory describes. Installations that log in with local accounts only, or that do not use LDAP, are not affected by this description. The sources do not list affected or fixed versions.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000547,"input_tokens":3330,"output_tokens":428,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113438':13A,16A '-2026':12A,15A 'accept':4A,45B 'account':60B,117C 'alter':104C 'attack':47B,82C,101C 'authent':30B,70C,86C 'bypass':84C 'certain':32B,77C 'chang':51B 'configur':33B,78C 'craft':74C 'cve':11A,14A 'data':54B 'delet':53B,106C 'exploit':80C 'fail':24B,63C 'host':22B 'id':8A,42B,93C 'inform':107C 'ldap':2A,17B,29B,69C,85C 'log':120C 'login':3A,7A,41B,92C 'may':83C,102C 'packag':18B 'password':10A,27B,67C,96C 'pleasant':1A,19B,23B,61C 'privileg':57B,114C 'process':72C 'product':111C 'proper':65C 'provid':62C,88C 'request':36B,75C 'result':99C 'self':21B 'self-host':20B 'special':73C 'store':108C 'use':118C 'valid':6A,40B,91C 'verifi':26B,66C 'view':50B,103C 'without':9A,94C","nicknames":[],"mitigations":[],"who_affected":"Teams running Pleasanter with LDAP authentication enabled under the configuration the advisory describes. Installations that log in with local accounts only, or that do not use LDAP, are not affected by this description. The sources do not list affected or fixed versions.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T09:16:34+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"vultures@jpcert.or.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113438","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113438","severity":null,"published_at":"2026-10-26T09:16:34+00:00","modified_at":"2026-10-26T09:16:34+00:00","first_seen_at":"2026-10-26T09:29:15+00:00","fetched_at":"2026-10-26T09:29:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}