Beveiligingsadvies

CVE-2026-1966

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-05 11:38:28

Laatst bijgewerkt 2026-02-05 14:18:33

Toegewezen door Yugabyte

CVSS-score 2.4

Status PUBLISHED

Beschrijving

YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services.

← Alle CVE's bekijken Bekijk op cve.org ↗