CVE-2011-2014: The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM),...

Security readout for executives and security teams

This is an authentication control failure in Microsoft LDAPS. A certificate that should have been blocked because it was revoked could still be accepted for a domain account, allowing access to Active Directory resources. The risk is concentrated in older affected Windows directory deployments using certificate-based LDAPS authentication. Exposure is likely limited to the listed Microsoft Windows versions running Active Directory, ADAM, or AD LDS with LDAPS certificate authentication. The described precondition is possession of a revoked X.509 certificate for a domain account. Prioritize remediation where affected directory services still handle authentication or privileged resource access. The business risk is unauthorized directory access using credentials that administrators already attempted to revoke. Mitigation focus: Review and apply Microsoft MS11-086 guidance for affected Windows systems.; Identify and retire affected legacy Windows directory servers where possible.; Audit LDAPS certificate authentication use on AD, ADAM, and AD LDS..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.