Light Weight Directory Access Protocol (LDAP): 389

Security Weaknesses

• Susceptible to weak authentication methods.

• Risk of directory enumeration by unauthorized users.

• Vulnerable to MITM attacks without encryption.

Security Defense and Mitigation Measures

• Use LDAPS (LDAP over SSL/TLS) for secure communication.

• Enforce strong authentication and access control policies.

• Monitor directory access for suspicious activity.

Indicators of Compromise or Attack

• Unusual queries or search patterns in the directory.

• Multiple failed authentication attempts.

• Unauthorized changes to directory objects or attributes