{"action":"Upgrade openldap to 2.4.48-r0 or later.","affected":[{"fixed":"2.4.48-r0","introduced":"2.0"}],"component":"openldap","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.16","exploited":false,"fixed_versions":["2.4.48-r0"],"id":"tcs_01M5NBABCEGRJMEXJEMYYTVG40","modified_at":"2026-09-21T06:17:52.481529254Z","published_at":"2019-07-26T13:15:12.720Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-13565","https://security.alpinelinux.org/vuln/CVE-2019-13565"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-13565#Alpine:v3.16/openldap","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-13565"}],"summary":"An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain"}