JVN#82312317
Pleasanter LDAP authentication bypass vulnerability

Overview

LDAP authentication of Pleasanter contains an authentication bypass vulnerability.

Products Affected

• Pleasanter versions 1.1.0.0 to 1.5.9.0

• LDAP authentication enabled,
• and installed on
  • a Linux environment (including docker images), or
  • a Windows environment with "DsProvider" set to "Novell",
• and integrated with
  • an Active Directory, or
  • some other LDAP server (such as OpenLDAP or 389 Directory Server) with Anonymous Bind allowed.

Description

Pleasanter provided by Implem Inc. fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations.

• Missing Critical Step in Authentication (CWE-304)
  • CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 6.9
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Base Score 6.5
  • CVE-2026-113438

Impact

An attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view, alter or delete information stored in the product with the privilege of the account used to log in.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.
The developer has released version 1.5.9.1 that addresses the vulnerability.

Apply the workaround
If the software cannot be updated soon for some reason, the developer recommends applying the workaround.
Contact the developer for the details.