Pleasanter LDAP authentication bypass vulnerability

{
  "id": "0ddf4ccc0c18a24254877893fd558109c9d7b1a94db6db9d20a9b1191e53bce0",
  "url": "https://jvn.jp/en/jp/JVN82312317/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Pleasanter LDAP authentication bypass vulnerability",
    "summary": "Pleasanter has an LDAP authentication bypass vulnerability under specified configurations. The developer released version 1.5.9.1 to address it.",
    "evidence": "The developer has released version 1.5.9.1 that addresses the vulnerability.",
    "products": [
      {
        "name": {
          "value": "Pleasanter",
          "evidence": "Pleasanter versions 1.1.0.0 to 1.5.9.0"
        },
        "prerequisites": [
          {
            "value": "LDAP authentication enabled, and installed on a Linux environment (including docker images), or a Windows environment with \"DsProvider\" set to \"Novell\", and integrated with an Active Directory, or some other LDAP server (such as OpenLDAP or 389 Directory Server) with Anonymous Bind allowed.",
            "evidence": "LDAP authentication enabled, and installed on a Linux environment (including docker images), or a Windows environment with \"DsProvider\" set to \"Novell\", and integrated with an Active Directory, or some other LDAP server (such as OpenLDAP or 389 Directory Server) with Anonymous Bind allowed."
          }
        ],
        "fixed_versions": [
          {
            "value": "1.5.9.1",
            "evidence": "The developer has released version 1.5.9.1 that addresses the vulnerability."
          }
        ],
        "affected_versions": [
          {
            "value": "1.1.0.0 to 1.5.9.0",
            "evidence": "Pleasanter versions 1.1.0.0 to 1.5.9.0"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [
      {
        "cve": "CVE-2026-113438",
        "product": "Pleasanter",
        "evidence": "Pleasanter provided by Implem Inc. fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. Missing Critical Step in Authentication (CWE-304) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 6.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Base Score 6.5 CVE-2026-113438 Impact An attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view, alter or delete information stored in the product with the privilege of the account used to log in. Solution Update the Software Update the software to the latest version according to the information provided by the developer. The developer has released version 1.5.9.1 that addresses the vulnerability."
      }
    ],
    "related_cves": [
      {
        "value": "CVE-2026-113438",
        "evidence": "CVE-2026-113438"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-jvn-english",
  "document_id": 23851,
  "published_at": "2026-10-23T06:00:00+00:00"
}