Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h455-mfvg-53mp

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.

EPSS

Процентиль: 36%
0.00154
Низкий

Связанные уязвимости

nvd
больше 25 лет назад

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.

EPSS

Процентиль: 36%
0.00154
Низкий