In many cases, additional applications such as Internet or intranet applications must access a directory service. Misconfiguration can lead to access rights being assigned incorrectly. A directory service can also be accessed without authorisation, and authentication data can be transmitted in clear text. In such cases, unencrypted information can be intercepted.