Beveiligingsadvies

CVE-2024-25655

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-18 00:00:00
Laatst bijgewerkt 2024-08-28 15:44:55
Toegewezen door mitre
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Insecure storage of LDAP passwords in the authentication functionality of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allows members (with read access to the application database) to decrypt the LDAP passwords of users who successfully authenticate to web management via LDAP.