Security Advisory

CVE-2024-25655

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-18 00:00:00
Last updated 2024-08-28 15:44:55
Assigner mitre
State PUBLISHED

Description

Insecure storage of LDAP passwords in the authentication functionality of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allows members (with read access to the application database) to decrypt the LDAP passwords of users who successfully authenticate to web management via LDAP.