Junglewise Threat Intelligence

CVE-2026-73644: OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

CVE-2026-73644 · Severity: low · CVSS 3.1 · Published 2026-07-24

Technologies: org.openidentityplatform.opendj:opendj-server-legacy (Maven). Vendors: Maven.

Executive brief

OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

Affected products

Maven org.openidentityplatform.opendj:opendj-server-legacy

Related threats

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/serv
OpenIdentityPlatform OpenDJ authorization bypass in SASL PLAIN authzid
OpenDJ Denial of Service (DoS) using alias loop